Attachment 575470 Details for Bug 769388 – pkisilent script which uses a password argument with quotes and slashes

pkisilent script which uses a password argument with quotes and slashes

769388-ca-silent.bash (text/plain), 3.50 KB, created by Kashyap Chamarthy on 2012-04-05 15:02:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kashyap Chamarthy

Created: 2012-04-05 15:02:05 UTC

Size: 3.50 KB

patch

obsolete

>#!/bin/bash
>set -x
>
>#create the temporary directory whre NSS db files are located
>#mkdir /tmp/testdb1
>
>
>pki_host=`hostname`
>ca_instance_name=pki-ca3
>
>## CA ports
>ca_nonssl_port=14530
>ca_agent_port=14533
>ca_ee_port=14534
>ca_admin_port=14535
>
>pki_silent_security_database_repository=/var/tmp/testdb1
>pki_silent_security_database_password='$pas\&w\`rd$'
>#ca_preop_pin=`cat /var/lib/${ca_instance_name}/conf/CS.cfg \
>#        | grep preop.pin | grep -v grep | awk -F= '{print $4}'`
>ca_preop_pin=z4jMnYBwUhcAoHrIxYyB
>
>pki_security_domain_name=silentdom3
>pki_silent_admin_user=admin
>pki_silent_admin_password=redhat
>pki_silent_admin_email=pki-ca3-admin@test.com
>ca_agent_name=ca-agent1
>
>ca_agent_key_size=2048
>ca_agent_key_type=rsa
>
>ca_agent_cert_subject="CN=ca-agent1,OU=pnq,O=redhat"
>
>pki_ldap_host=localhost
>pki_ldap_port=26469
>pki_bind_dn="cn=Directory\ Manager"
>pki_bind_password=Secret123
>ca_base_dn="dc=${pki_host}-${ca_instance_name}"
>ca_db_name="${pki_host}-${ca_instance_name}"
>ca_key_size=2048
>ca_key_type=rsa
>
>ca_key_algorithm=SHA512withRSA
>ca_signing_algorithm=SHA512withRSA
>ca_signing_signingalgorithm=SHA512withRSA
>ca_ocsp_signing_signingalgorithm=SHA512withRSA
>ca_save_p12=false
>
>ca_subsystem_name=Certificate-Authority-ca3
>ca_token_name=internal
>ca_token_password=redhat
>
>
>ca_sign_cert_subject_name="cn=Certificate\ Authority-ca3,o=${pki_security_domain_name}"
>ca_subsystem_cert_subject_name="cn=CA\ Subsystem\ Certificate-ca3,o=${pki_security_domain_name}"
>ca_ocsp_cert_subject_name="cn=OCSP\ Signing\ Certificate-ca3,o=${pki_security_domain_name}"
>ca_server_cert_subject_name="cn=${pki_host},o=${pki_security_domain_name}"
>ca_audit_signing_cert_subject_name="cn=CA\ Audit\ Signing\ Certificate-ca3,o=${pki_security_domain_name}"
>
>pki_silent_ca_log=/var/tmp/$ca_instance_name
>
>
>
>pkisilent ConfigureCA \
>        -cs_hostname "${pki_host}" \
>        -cs_port ${ca_admin_port} \
>        -client_certdb_dir ${pki_silent_security_database_repository} \
>        -client_certdb_pwd ${pki_silent_security_database_password} \
>        -preop_pin ${ca_preop_pin} \
>        -domain_name "${pki_security_domain_name}" \
>        -admin_user ${pki_silent_admin_user} \
>        -admin_password ${pki_silent_admin_password} \
>        -admin_email "${pki_silent_admin_email}" \
>        -agent_name ${ca_agent_name} \
>        -agent_key_size ${ca_agent_key_size} \
>        -agent_key_type ${ca_agent_key_type} \
>        -agent_cert_subject "${ca_agent_cert_subject}" \
>        -ldap_host ${pki_ldap_host} \
>        -ldap_port ${pki_ldap_port} \
>        -bind_dn "${pki_bind_dn}" \
>        -bind_password ${pki_bind_password} \
>        -base_dn "${ca_base_dn}" \
>        -db_name "${ca_db_name}" \
>        -key_size ${ca_key_size} \
>        -key_type ${ca_key_type} \
>        -key_algorithm ${ca_key_algorithm} \
>        -signing_algorithm ${ca_signing_algorithm} \
>        -signing_signingalgorithm ${ca_signing_signingalgorithm} \
>        -ocsp_signing_signingalgorithm ${ca_ocsp_signing_signingalgorithm} \
>        -save_p12 ${ca_save_p12} \
>        -subsystem_name ${ca_subsystem_name} \
>        -token_name ${ca_token_name} \
>        -token_pwd ${ca_token_password} \
>        -ca_sign_cert_subject_name "${ca_sign_cert_subject_name}" \
>        -ca_subsystem_cert_subject_name "${ca_subsystem_cert_subject_name}" \
>        -ca_ocsp_cert_subject_name "${ca_ocsp_cert_subject_name}" \
>        -ca_server_cert_subject_name "${ca_server_cert_subject_name}" \
>        -ca_audit_signing_cert_subject_name \
>        "${ca_audit_signing_cert_subject_name}" \
>        | tee ${pki_silent_ca_log}
>
>

Actions: View

Attachments on bug 769388: 567818 | 567819 | 575470