lasantha
7 years ago
parent
6008097712
commit
08245bd329
@ -0,0 +1,464 @@
|
||||
#!/bin/bash
|
||||
|
||||
echo ""
|
||||
echo "----------------------------------------"
|
||||
echo "WSO2 IoT Server IP configuration tool"
|
||||
echo "----------------------------------------"
|
||||
|
||||
|
||||
##################################### IP configs related to broker ####################################
|
||||
|
||||
echo ""
|
||||
echo ">>> Step 1: Change current IP address of the IoT Core"
|
||||
|
||||
echo ""
|
||||
echo "Please enter the IoT Core IP that you need to replace (if you are trying out IoTS server for the first time this will be localhost)"
|
||||
read val1;
|
||||
|
||||
while [[ -z $val1 ]]; do #if $val1 is a zero length String
|
||||
echo "Please enter the IoT Core IP that you need to replace (if you are trying out IoTS server for the first time this will be localhost)"
|
||||
read val1;
|
||||
done
|
||||
|
||||
echo ""
|
||||
echo "Please enter your current IP"
|
||||
read val2;
|
||||
|
||||
while [[ -z $val2 ]]; do #if $val2 is a zero length String
|
||||
echo "Please enter your current IP"
|
||||
read val2;
|
||||
done
|
||||
|
||||
|
||||
echo "--------------------------------------"
|
||||
echo "All your " + $val1 + " IP's are replaced with " +$val2 ;
|
||||
echo "--------------------------------------"
|
||||
|
||||
replaceText='s/localhost/'$val1'/g'
|
||||
|
||||
echo "Changing <IoT_HOME>/conf/carbon.xml"
|
||||
sed -i '' -e 's#\(<HostName>\)'$val1'\(</HostName>\)#\1'$val2'\2#g' ../conf/carbon.xml
|
||||
sed -i '' -e 's#\(<MgtHostName>\)'$val1'\(</MgtHostName>\)#\1'$val2'\2#g' ../conf/carbon.xml
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/conf/app-manager.xml"
|
||||
sed -i '' -e 's#\(<IdentityProviderUrl>\)https\:\/\/'$val1'\:\${mgt\.transport\.https\.port}\/samlsso\(</IdentityProviderUrl>\)#\1'https://$val2:9443/samlsso'\2#g' ../conf/app-manager.xml
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/conf/identity/sso-idp-config.xml"
|
||||
sed -i '' -e 's/'$val1'/'$val2'/g' ../conf/identity/sso-idp-config.xml
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/conf/iot-api-config.xml"
|
||||
sed -i '' -e 's/'$val1'/'$val2'/g' ../conf/iot-api-config.xml
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/repository/deployment/server/jaggeryapps/devicemgt/app/conf/app-conf.json"
|
||||
sed -i -e 's/"identityProvider.*/\"identityProviderUrl\"\ :\ "https\:\/\/'$val2':9443\/samlsso\"\,/' ../repository/deployment/server/jaggeryapps/devicemgt/app/conf/app-conf.json
|
||||
sed -i -e 's/"acs.*/\"acs\"\ :\ "https\:\/\/'$val2':9443\/devicemgt\/uuf\/sso\/acs\"\,/' ../repository/deployment/server/jaggeryapps/devicemgt/app/conf/app-conf.json
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/repository/deployment/server/jaggeryapps/api-store/site/conf/site.json"
|
||||
sed -i -e 's/"identityProvider.*/\"identityProviderUrl\"\ :\ "https\:\/\/'$val2':9443\/samlsso\"\,/' ../repository/deployment/server/jaggeryapps/api-store/site/conf/site.json
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/repository/deployment/server/jaggeryapps/portal/configs/designer.json"
|
||||
sed -i -e 's/"acs.*/\"acs\"\ :\ "https\:\/\/'$val2':9443\/portal\/acs\"\,/' ../repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/conf/api-manager.xml"
|
||||
if grep -q '<!-- Server URL of the API key manager -->' ../conf/api-manager.xml;
|
||||
then
|
||||
echo 'found'
|
||||
sed -i -e 's|<!-- Server URL of the API key manager -->||' ../conf/api-manager.xml
|
||||
fi
|
||||
|
||||
if grep -q '<ServerURL>https:\/\/\${carbon.local.ip}:\${mgt.transport.https.port}\${carbon.context}services\/<\/ServerURL>' ../conf/api-manager.xml;
|
||||
then
|
||||
echo 'found'
|
||||
sed -i -e 's/<ServerURL>https:\/\/\${carbon.local.ip}:\${mgt.transport.https.port}\${carbon.context}services\/<\/ServerURL>//' ../conf/api-manager.xml
|
||||
fi
|
||||
|
||||
if grep -q '<ServerURL>https:\/\/'$val2':\${mgt.transport.https.port}\${carbon.context}services\/<\/ServerURL>' ../conf/api-manager.xml;
|
||||
then
|
||||
echo 'found'
|
||||
sed -i -e 's/<ServerURL>https:\/\/'$val2':\${mgt.transport.https.port}\${carbon.context}services\/<\/ServerURL>//' ../conf/api-manager.xml
|
||||
fi
|
||||
|
||||
sed -i '' -e 's/<APIKeyValidator>/<APIKeyValidator><!-- Server URL of the API key manager --><ServerURL>https:\/\/'$val2'\:\$\{mgt\.transport\.https\.port\}\$\{carbon\.context\}services\/<\/ServerURL>/g' ../conf/api-manager.xml
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
if grep -q '<RevokeAPIURL>https:\/\/localhost:\${https.nio.port}\/revoke<\/RevokeAPIURL>' ../conf/api-manager.xml;
|
||||
then
|
||||
sed -i -e 's|<RevokeAPIURL>https:\/\/localhost:\${https.nio.port}\/revoke<\/RevokeAPIURL>|<RevokeAPIURL>https:\/\/'$val2':\${https.nio.port}\/revoke<\/RevokeAPIURL>|' ../conf/api-manager.xml
|
||||
fi
|
||||
|
||||
if grep -q '<RevokeAPIURL>https:\/\/'$val1':\${https.nio.port}\/revoke<\/RevokeAPIURL>' ../conf/api-manager.xml;
|
||||
then
|
||||
sed -i -e 's|<RevokeAPIURL>https:\/\/'$val1':\${https.nio.port}\/revoke<\/RevokeAPIURL>|<RevokeAPIURL>https:\/\/'$val2':\${https.nio.port}\/revoke<\/RevokeAPIURL>|' ../conf/api-manager.xml
|
||||
fi
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/conf/etc/webapp-publisher-config.xml"
|
||||
sed -i '' -e 's#\(<EnabledUpdateApi>\)false\(</EnabledUpdateApi>\)#\1'true'\2#g' ../conf/etc/webapp-publisher-config.xml
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/bin/iot-server.sh"
|
||||
sed -i -e 's/-Diot.core.host.*/-Diot.core.host="'$val2'" \\/' ../bin/iot-server.sh
|
||||
sed -i -e 's/-Diot.keymanager.host.*/-Diot.keymanager.host="'$val2'" \\/' ../bin/iot-server.sh
|
||||
sed -i -e 's/-Diot.gateway.host.*/-Diot.gateway.host="'$val2'" \\/' ../bin/iot-server.sh
|
||||
echo "Completed!!"
|
||||
|
||||
#----------------------
|
||||
echo ""
|
||||
echo "Changing hostURL of <IoT_HOME>/wso2/broker/conf/broker.xml"
|
||||
if grep -q '<property name="hostURL">https://'$val1':9443/services/OAuth2TokenValidationService</property>' ../wso2/broker/conf/broker.xml;
|
||||
then
|
||||
echo "found"
|
||||
sed -i -e 's|<property name="hostURL">https:\/\/'$val1':9443\/services\/OAuth2TokenValidationService</\property>|<property name="hostURL">https:\/\/'$val2':9443\/services\/OAuth2TokenValidationService</\property>|' ../wso2/broker/conf/broker.xml
|
||||
echo "Completed!!"
|
||||
fi
|
||||
|
||||
#------------------------
|
||||
echo ""
|
||||
echo "Changing tokenEndpoint of <IoT_HOME>/wso2/broker/conf/broker.xml"
|
||||
if grep -q '<property name="tokenEndpoint">https:\/\/'$val1':8243</\property>' ../wso2/broker/conf/broker.xml;
|
||||
then
|
||||
echo "found"
|
||||
sed -i -e 's|<property name="tokenEndpoint">https:\/\/'$val1':8243</\property>|<property name="tokenEndpoint">https:\/\/'$val2':8243</\property>|' ../wso2/broker/conf/broker.xml
|
||||
echo "Completed!!"
|
||||
fi
|
||||
|
||||
#--------------------------
|
||||
echo ""
|
||||
echo "Changing deviceMgtServerUrl of <IoT_HOME>/wso2/broker/conf/broker.xml"
|
||||
if grep -q '<property name="deviceMgtServerUrl">https:\/\/'$val1':8243</\property>' ../wso2/broker/conf/broker.xml;
|
||||
then
|
||||
echo "found"
|
||||
sed -i -e 's|<property name="deviceMgtServerUrl">https:\/\/'$val1':8243</\property>|<property name="deviceMgtServerUrl">https:\/\/'$val2':8243</\property>|' ../wso2/broker/conf/broker.xml
|
||||
echo "Completed!!"
|
||||
fi
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/wso2/analytics/bin/wso2server.sh"
|
||||
sed -i -e 's/-Diot.keymanager.host.*/-Diot.keymanager.host="'$val2'" \\/' ../wso2/analytics/bin/wso2server.sh
|
||||
sed -i -e 's/-Diot.gateway.host.*/-Diot.gateway.host="'$val2'" \\/' ../wso2/analytics/bin/wso2server.sh
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json"
|
||||
sed -i -e 's/"identityProviderURL.*/\"identityProviderURL\"\:\"https\:\/\/'$val2':9443\/samlsso\"\,/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
sed -i -e 's/"dynamicClientAppRegistrationServiceURL.*/\"dynamicClientAppRegistrationServiceURL\"\:\"https\:\/\/'$val2':9443\/dynamic-client-web\/register\"\,/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
sed -i -e 's/"apiManagerClientAppRegistrationServiceURL.*/\"apiManagerClientAppRegistrationServiceURL\"\:\"https\:\/\/'$val2':9443\/api-application-registration\/register\/tenants\"\,/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
sed -i -e 's/"tokenServiceURL.*/\"tokenServiceURL\"\: \"https\:\/\/'$val2':9443\/oauth2\/token\"/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
sed -i -e 's/"hostname.*/\"hostname\"\: \"'$val2'\"\,/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
echo "Completed!!"
|
||||
|
||||
##################################### IP configs related to broker ####################################
|
||||
echo ""
|
||||
echo ""
|
||||
echo ">>> Step 2: Change current IP address of the IoT Broker"
|
||||
echo "-------------------------------------------------------"
|
||||
|
||||
echo ""
|
||||
echo "Please enter the IoT Broker IP that you need to replace (if you are trying out IoTS server for the first time this will be localhost)"
|
||||
read val3;
|
||||
|
||||
while [[ -z $val3 ]]; do #if $val1 is a zero length String
|
||||
echo "Please enter the IoT Broker IP that you need to replace (if you are trying out IoTS server for the first time this will be localhost)"
|
||||
read val3;
|
||||
done
|
||||
|
||||
echo ""
|
||||
echo "Please enter your current IP"
|
||||
read val4;
|
||||
|
||||
while [[ -z $val4 ]]; do #if $val2 is a zero length String
|
||||
echo "Please enter your current IP"
|
||||
read val4;
|
||||
done
|
||||
|
||||
echo ""
|
||||
echo "--------------------------------------"
|
||||
echo "All your " + $val3 + " IP's are replaced with " +$val4 ;
|
||||
echo "--------------------------------------"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/wso2/analytics/bin/wso2server.sh"
|
||||
sed -i -e 's/-Dmqtt.broker.host.*/-Dmqtt.broker.host="'$val4'" \\/' ../wso2/analytics/bin/wso2server.sh
|
||||
echo "Completed!!"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/bin/iot-server.sh"
|
||||
sed -i -e 's/-Dmqtt.broker.host.*/-Dmqtt.broker.host="'$val4'" \\/' ../bin/iot-server.sh
|
||||
echo "Completed!!"
|
||||
|
||||
|
||||
|
||||
|
||||
##################################### IP configs related to analytics ####################################
|
||||
|
||||
echo ""
|
||||
echo ""
|
||||
echo ">>> Step 3: Change current IP address of the IoT Analytics"
|
||||
echo "-------------------------------------------------------"
|
||||
|
||||
echo ""
|
||||
echo "Please enter the IoT Analytics IP that you need to replace (if you are trying out IoTS server for the first time
|
||||
this will be localhost)"
|
||||
read val5;
|
||||
|
||||
while [[ -z $val5 ]]; do #if $val1 is a zero length String
|
||||
echo "Please enter the IoT Analytics IP that you need to replace (if you are trying out IoTS server for the first time this will be localhost)"
|
||||
read val5;
|
||||
done
|
||||
|
||||
echo ""
|
||||
echo "Please enter your current IP"
|
||||
read val6;
|
||||
|
||||
while [[ -z $val6 ]]; do #if $val2 is a zero length String
|
||||
echo "Please enter your current IP"
|
||||
read val6;
|
||||
done
|
||||
|
||||
echo ""
|
||||
echo "--------------------------------------"
|
||||
echo "All your " + $val5 + " IP's are replaced with " +$val6 ;
|
||||
echo "--------------------------------------"
|
||||
|
||||
#--------------------
|
||||
echo "Changing <IoT_HOME>/bin/iot-server.sh"
|
||||
sed -i -e 's/-Diot.analytics.host.*/-Diot.analytics.host="'$val6'" \\/' ../bin/iot-server.sh
|
||||
echo "Completed!!"
|
||||
|
||||
echo "Changing <IoT_HOME>/wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json"
|
||||
sed -i -e 's/"acs.*/\"acs\"\:\"https\:\/\/'$val6':9445\/portal\/acs\"\,/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
sed -i -e 's/"callbackUrl.*/\"callbackUrl\"\:\"https\:\/\/'$val6':9445\/portal\"\,/' ../wso2/analytics/repository/deployment/server/jaggeryapps/portal/configs/designer.json
|
||||
echo "Completed!!"
|
||||
|
||||
echo ""
|
||||
echo "--------------------------------------------"
|
||||
echo "Generating SSL certificates for the profiles"
|
||||
echo "--------------------------------------------"
|
||||
echo ""
|
||||
|
||||
B_SUBJ=''
|
||||
C_SUBJ=''
|
||||
A_SUBJ=''
|
||||
SERVER_ADDRESS=''
|
||||
slash='/'
|
||||
equal='='
|
||||
|
||||
buildSubject(){
|
||||
if [ $1 = "CN" ]; then
|
||||
echo "Please provide Common Name "
|
||||
read val
|
||||
while [[ -z $val ]]; do #if $val is a zero length String
|
||||
echo "Common name(your server IP/hostname) cannot be null. Please enter the Common name."
|
||||
read val;
|
||||
done
|
||||
if [ -n $val ]; then #This is true if $val is not empty (If $val is not a non zero length String)
|
||||
if [ $3 = "C" ]; then
|
||||
C_SUBJ="$C_SUBJ$slash$1$equal$val"
|
||||
return
|
||||
elif [ $3 = "B" ]; then
|
||||
B_SUBJ="$B_SUBJ$slash$1$equal$val"
|
||||
return
|
||||
else
|
||||
A_SUBJ="$A_SUBJ$slash$1$equal$val"
|
||||
SERVER_ADDRESS=$val
|
||||
return
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "Please provide "$2". Press Enter to skip."
|
||||
read val;
|
||||
if [ ! -z $val ]; then #If $val is not a zero length String; This is same as if[ -n $val]; then
|
||||
if [ $3 = "C" ]; then
|
||||
C_SUBJ="$C_SUBJ$slash$1$equal$val"
|
||||
return
|
||||
elif [ $3 = "B" ]; then
|
||||
B_SUBJ="$B_SUBJ$slash$1$equal$val"
|
||||
return
|
||||
else
|
||||
A_SUBJ="$A_SUBJ$slash$1$equal$val"
|
||||
return
|
||||
fi
|
||||
fi
|
||||
}
|
||||
mkdir tmp
|
||||
echo ''
|
||||
echo '=======Enter Values for IoT Core SSL Certificate======='
|
||||
|
||||
buildSubject 'C' 'Country' 'C'
|
||||
buildSubject 'ST' 'State' 'C'
|
||||
buildSubject 'L' 'Location' 'C'
|
||||
buildSubject 'O' 'Organization' 'C'
|
||||
buildSubject 'OU' 'Organizational Unit' 'C'
|
||||
buildSubject 'emailAddress' 'Email Address' 'C'
|
||||
buildSubject 'CN' 'Common Name' 'C'
|
||||
|
||||
echo ""
|
||||
echo 'Provided IoT Core SSL Subject : ' $C_SUBJ
|
||||
|
||||
echo 'If you have a different IoT Core Keystore password please enter it here. Press Enter to use the default password.'
|
||||
read -s password
|
||||
if [ ! -z $password ]; then
|
||||
SSL_PASS=$password
|
||||
else
|
||||
SSL_PASS="wso2carbon"
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Generating SSL Certificate for IoT Core"
|
||||
openssl genrsa -out ./tmp/c.key 4096
|
||||
openssl req -new -key ./tmp/c.key -out ./tmp/c.csr -subj $C_SUBJ
|
||||
openssl x509 -req -days 730 -in ./tmp/c.csr -signkey ./tmp/c.key -set_serial 044324884 -out ./tmp/c.crt
|
||||
|
||||
echo "Export to PKCS12"
|
||||
openssl pkcs12 -export -out ./tmp/CKEYSTORE.p12 -inkey ./tmp/c.key -in ./tmp/c.crt -name "wso2carbon" -password pass:$SSL_PASS
|
||||
|
||||
echo "Export PKCS12 to JKS"
|
||||
keytool -importkeystore -srckeystore ./tmp/CKEYSTORE.p12 -srcstoretype PKCS12 -destkeystore ../repository/resources/security/wso2carbon.jks -deststorepass wso2carbon -srcstorepass wso2carbon -noprompt
|
||||
keytool -importkeystore -srckeystore ./tmp/CKEYSTORE.p12 -srcstoretype PKCS12 -destkeystore ../repository/resources/security/client-truststore.jks -deststorepass wso2carbon -srcstorepass wso2carbon -noprompt
|
||||
|
||||
|
||||
|
||||
##################
|
||||
echo ""
|
||||
echo 'Use same values for IoT Broker SSL Cerificate? (Y/N)'
|
||||
response=''
|
||||
read response
|
||||
if [ $response = "y" -o $response = "Y" ]; then
|
||||
B_SUBJ=$C_SUBJ
|
||||
else
|
||||
echo ''
|
||||
echo '=======Enter Values for IoT Broker SSL Certificate======='
|
||||
|
||||
buildSubject 'C' 'Country' 'B'
|
||||
buildSubject 'ST' 'State' 'B'
|
||||
buildSubject 'L' 'Location' 'B'
|
||||
buildSubject 'O' 'Organization' 'B'
|
||||
buildSubject 'OU' 'Organizational Unit' 'B'
|
||||
buildSubject 'emailAddress' 'Email Address' 'B'
|
||||
buildSubject 'CN' 'Common Name' 'B'
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo 'Provided IoT Broker SSL Subject : ' $B_SUBJ
|
||||
|
||||
echo 'If you have a different IoT Broker Keystore password please enter it here. Press Enter to use the default password.'
|
||||
read -s password
|
||||
if [ ! -z $password ]; then
|
||||
SSL_PASS=$password
|
||||
else
|
||||
SSL_PASS="wso2carbon"
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Generating SSL Certificate for IoT Broker"
|
||||
openssl genrsa -out ./tmp/b.key 4096
|
||||
openssl req -new -key ./tmp/b.key -out ./tmp/b.csr -subj $B_SUBJ
|
||||
openssl x509 -req -days 730 -in ./tmp/b.csr -signkey ./tmp/b.key -set_serial 044324885 -out ./tmp/b.crt
|
||||
|
||||
echo "Export to PKCS12"
|
||||
openssl pkcs12 -export -out ./tmp/BKEYSTORE.p12 -inkey ./tmp/b.key -in ./tmp/b.crt -name "wso2carbon" -password pass:$SSL_PASS
|
||||
|
||||
echo "Export PKCS12 to JKS"
|
||||
keytool -importkeystore -srckeystore ./tmp/BKEYSTORE.p12 -srcstoretype PKCS12 -destkeystore ../wso2/broker/repository/resources/security/wso2carbon.jks -deststorepass wso2carbon -srcstorepass wso2carbon -noprompt
|
||||
keytool -importkeystore -srckeystore ./tmp/BKEYSTORE.p12 -srcstoretype PKCS12 -destkeystore ../wso2/broker/repository/resources/security/client-truststore.jks -deststorepass wso2carbon -srcstorepass wso2carbon -noprompt
|
||||
|
||||
|
||||
|
||||
######################
|
||||
echo ""
|
||||
echo 'Use same values for IoT Analytics SSL Cerificate? (Y/N)'
|
||||
response=''
|
||||
read response
|
||||
if [ $response = "y" -o $response = "Y" ]; then
|
||||
A_SUBJ=$C_SUBJ
|
||||
else
|
||||
echo ''
|
||||
echo '=======Enter Values for IoT Analytics SSL Certificate======='
|
||||
|
||||
buildSubject 'C' 'Country' 'A'
|
||||
buildSubject 'ST' 'State' 'A'
|
||||
buildSubject 'L' 'Location' 'A'
|
||||
buildSubject 'O' 'Organization' 'A'
|
||||
buildSubject 'OU' 'Organizational Unit' 'A'
|
||||
buildSubject 'emailAddress' 'Email Address' 'A'
|
||||
buildSubject 'CN' 'Common Name' 'A'
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo 'Provided IoT Analytics SSL Subject : ' $A_SUBJ
|
||||
|
||||
echo 'If you have a different IoT Analytics Keystore password please enter it here. Press Enter to use the default password.'
|
||||
read -s password
|
||||
if [ ! -z $password ]; then
|
||||
SSL_PASS=$password
|
||||
else
|
||||
SSL_PASS="wso2carbon"
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Generating SSL Certificate for IoT Analytics"
|
||||
openssl genrsa -out ./tmp/a.key 4096
|
||||
openssl req -new -key ./tmp/a.key -out ./tmp/a.csr -subj $A_SUBJ
|
||||
openssl x509 -req -days 730 -in ./tmp/a.csr -signkey ./tmp/a.key -set_serial 044324886 -out ./tmp/a.crt
|
||||
|
||||
echo "Export to PKCS12"
|
||||
openssl pkcs12 -export -out ./tmp/AKEYSTORE.p12 -inkey ./tmp/a.key -in ./tmp/a.crt -name "wso2carbon" -password pass:$SSL_PASS
|
||||
|
||||
echo "Export PKCS12 to JKS"
|
||||
keytool -importkeystore -srckeystore ./tmp/AKEYSTORE.p12 -srcstoretype PKCS12 -destkeystore ../wso2/analytics/repository/resources/security/wso2carbon.jks -deststorepass wso2carbon -srcstorepass wso2carbon -noprompt
|
||||
keytool -importkeystore -srckeystore ./tmp/AKEYSTORE.p12 -srcstoretype PKCS12 -destkeystore ../wso2/analytics/repository/resources/security/client-truststore.jks -deststorepass wso2carbon -srcstorepass wso2carbon -noprompt
|
||||
|
||||
|
||||
#########################
|
||||
# copying certificates to client trust stores
|
||||
echo ""
|
||||
echo "Copying certificates to client trust stores"
|
||||
|
||||
# copying broker and analytics certificates to IoT core client trust store
|
||||
keytool -import -alias wso2broker -file ./tmp/b.crt -keystore ../repository/resources/security/client-truststore.jks -storepass wso2carbon -noprompt
|
||||
keytool -import -alias wso2analytics -file ./tmp/a.crt -keystore ../repository/resources/security/client-truststore.jks -storepass wso2carbon -noprompt
|
||||
|
||||
# copying core and analytics certificates to IoT broker client trust store
|
||||
keytool -import -alias wso2iotcore -file ./tmp/c.crt -keystore ../wso2/broker/repository/resources/security/client-truststore.jks -storepass wso2carbon -noprompt
|
||||
keytool -import -alias wso2analytics -file ./tmp/a.crt -keystore ../wso2/broker/repository/resources/security/client-truststore.jks -storepass wso2carbon -noprompt
|
||||
|
||||
# copying core and broker certificates to IoT analytics client trust store
|
||||
keytool -import -alias wso2iotcore -file ./tmp/c.crt -keystore ../wso2/analytics/repository/resources/security/client-truststore.jks -storepass wso2carbon -noprompt
|
||||
keytool -import -alias wso2analytics -file ./tmp/b.crt -keystore ../wso2/analytics/repository/resources/security/client-truststore.jks -storepass wso2carbon -noprompt
|
||||
|
||||
echo ""
|
||||
echo "Replacing IoT server public cert from iot-default.xml"
|
||||
|
||||
#keytool -genkey -alias wso2carbon -keyalg RSA -keysize 2048 -keystore ../repository/resources/security/wso2carbonjwt.jks -dname "CN=192.168.1.2,
|
||||
#OU=Home,O=Home,L=SL,S=WS,C=LK" -storepass wso2carbon -keypass wso2carbon
|
||||
#cp -R ../repository/resources/security/wso2carbonjwt.jks ../wso2/analytics/repository/resources/security/
|
||||
#
|
||||
#if hash tac; then
|
||||
# VAR=$(keytool -exportcert -alias wso2carbon -keystore ../repository/resources/security/wso2carbonjwt.jks -rfc -storepass wso2carbon | tail -n +2 | tac | tail -n +2 | tac | tr -cd "[:print:]");
|
||||
#else
|
||||
# VAR=$(keytool -exportcert -alias wso2carbon -keystore ../repository/resources/security/wso2carbonjwt.jks -rfc -storepass wso2carbon | tail -n +2 | tail -r | tail -n +2 | tail -r | tr -cd "[:print:]"); fi
|
||||
#
|
||||
#
|
||||
#echo ""
|
||||
#echo "Printing certificate"
|
||||
#echo "-----------------------"
|
||||
#echo $VAR
|
||||
#sed -i -e 's#<Certificate>.*#<Certificate>'"$VAR"'</Certificate>#g' ../conf/identity/identity-providers/iot_default.xml
|
||||
#echo "Completed!!!"
|
||||
Loading…
Reference in new issue