a1e5404416
Added scripts for installing dogtag and configuring barbican to use the dogtag plugin in order to add a new gate that run the functional test suite against dogtag. Change-Id: I40dfdbc414dbc4fa07b5a5cbed074e6d340c7778
123 lines
3.3 KiB
Bash
Executable File
123 lines
3.3 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# This script is executed inside pre_test_hook function in devstack gate.
|
|
|
|
# Install barbican devstack integration
|
|
BARBICAN_BASE=/opt/stack/new/barbican/contrib/devstack
|
|
DEVSTACK_BASE=/opt/stack/new/devstack
|
|
cp $BARBICAN_BASE/lib/* $DEVSTACK_BASE/lib
|
|
cp $BARBICAN_BASE/extras.d/* $DEVSTACK_BASE/extras.d
|
|
|
|
function install_389_directory_server {
|
|
yum install -y 389-ds-base
|
|
mkdir -p /etc/389-ds
|
|
|
|
cat > /etc/389-ds/setup.inf <<EOF
|
|
[General]
|
|
FullMachineName= localhost.localdomain
|
|
SuiteSpotUserID= nobody
|
|
SuiteSpotGroup= nobody
|
|
|
|
[slapd]
|
|
ServerPort= 389
|
|
ServerIdentifier= pki-tomcat
|
|
Suffix= dc=example,dc=com
|
|
RootDN= cn=Directory Manager
|
|
RootDNPwd= PASSWORD
|
|
EOF
|
|
|
|
setup-ds.pl --silent --file=/etc/389-ds/setup.inf
|
|
}
|
|
|
|
function wait_for_ca {
|
|
while true; do
|
|
ca_running=$(curl -s -k https://localhost:8373/ca/admin/ca/getStatus | grep -c running)
|
|
if [[ $ca_running == 1 ]]; then
|
|
break
|
|
fi
|
|
sleep 1
|
|
done
|
|
}
|
|
|
|
function install_dogtag {
|
|
yum install -y pki-ca pki-kra
|
|
mkdir -p /etc/dogtag
|
|
|
|
cat > /etc/dogtag/ca.cfg <<EOF
|
|
[CA]
|
|
pki_admin_email=caadmin@example.com
|
|
pki_admin_name=caadmin
|
|
pki_admin_nickname=caadmin
|
|
pki_admin_password=PASSWORD
|
|
pki_admin_uid=caadmin
|
|
pki_backup_password=PASSWORD
|
|
pki_client_database_password=PASSWORD
|
|
pki_client_database_purge=False
|
|
pki_client_pkcs12_password=PASSWORD
|
|
pki_clone_pkcs12_password=PASSWORD
|
|
pki_ds_base_dn=dc=ca,dc=example,dc=com
|
|
pki_ds_database=ca
|
|
pki_ds_password=PASSWORD
|
|
pki_security_domain_name=EXAMPLE
|
|
pki_token_password=PASSWORD
|
|
pki_https_port=8373
|
|
pki_http_port=8370
|
|
pki_ajp_port=8379
|
|
pki_tomcat_server_port=8375
|
|
EOF
|
|
|
|
pkispawn -v -f /etc/dogtag/ca.cfg -s CA
|
|
|
|
wait_for_ca
|
|
|
|
cat > /etc/dogtag/kra.cfg <<EOF
|
|
[KRA]
|
|
pki_admin_cert_file=/root/.dogtag/pki-tomcat/ca_admin.cert
|
|
pki_admin_email=kraadmin@example.com
|
|
pki_admin_name=kraadmin
|
|
pki_admin_nickname=kraadmin
|
|
pki_admin_password=PASSWORD
|
|
pki_admin_uid=kraadmin
|
|
pki_backup_password=PASSWORD
|
|
pki_client_database_password=PASSWORD
|
|
pki_client_database_purge=False
|
|
pki_client_pkcs12_password=PASSWORD
|
|
pki_clone_pkcs12_password=PASSWORD
|
|
pki_ds_base_dn=dc=kra,dc=example,dc=com
|
|
pki_ds_database=kra
|
|
pki_ds_password=PASSWORD
|
|
pki_security_domain_name=EXAMPLE
|
|
pki_security_domain_user=caadmin
|
|
pki_security_domain_password=PASSWORD
|
|
pki_token_password=PASSWORD
|
|
pki_https_port=8373
|
|
pki_http_port=8370
|
|
pki_ajp_port=8379
|
|
pki_tomcat_server_port=8375
|
|
pki_security_domain_hostname=localhost.localdomain
|
|
pki_security_domain_https_port=8373
|
|
EOF
|
|
|
|
pkispawn -v -f /etc/dogtag/kra.cfg -s KRA
|
|
}
|
|
|
|
if [[ -n $BARBICAN_USE_DOGTAG ]]; then
|
|
# Make sure that 127.0.0.1 resolves to localhost.localdomain for Directory Server
|
|
sed -i "s/^127\.0\.0\.1.*/127\.0\.0\.1\tlocalhost.localdomain localhost/" /etc/hosts
|
|
|
|
install_389_directory_server
|
|
install_dogtag
|
|
fi
|