blob: 40f75ee49e8314f23e7f890a5db3324b7b6e79dd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
#!/bin/sh
if [ -z "$THE_THING_SYSTEM" ]; then
THE_THING_SYSTEM=/opt/TheThingSystem
export THE_THING_SYSTEM
fi
STEWARD_DIR=${THE_THING_SYSTEM}/steward
STEWARD_SETTINGS=$STEWARD_DIR/db/server.key
RET=0
if [ -s $STEWARD_SETTINGS ]; then
exit 0
fi
# Change the port of the eca-web so that steward web-ui can live in
# port 80. Eca-web will be moved to HTTP port 8080.
sed -i 's/PORT=80$/PORT=8080/' /etc/eca-web/config
if [ ! -d $STEWARD_DIR/sandbox ]; then
mkdir -p $STEWARD_DIR/sandbox
fi
if [ ! -d $STEWARD_DIR/db ]; then
mkdir -p $STEWARD_DIR/db
fi
if [ -z "$NODE_PATH" ]; then
NODE_PATH=${THE_THING_SYSTEM}/steward
export NODE_PATH
fi
cd $THE_THING_SYSTEM/steward
echo -n "Creating server key..."
rm -f ${STEWARD_DIR}/sandbox/server.crt ${STEWARD_DIR}/sandbox/server.sha1
node <<EOF
require('x509-keygen').x509_keygen({ subject : '/CN=steward'
, keyfile : '${STEWARD_DIR}/db/server.key'
, certfile : '${STEWARD_DIR}/sandbox/server.crt'
, sha1file : '${STEWARD_DIR}/sandbox/server.sha1'
, alternates : [ 'DNS:' + require('os').hostname(), 'DNS:eca.local' ]
, destroy : false }, function(err, data) {
if (err) return console.log('keypair generation error: ' + err.message);
console.log('keypair generated.');
});
EOF
if [ -f ${STEWARD_DIR}/db/server.key ]; then
chmod 400 ${STEWARD_DIR}/db/server.key
chmod 444 ${STEWARD_DIR}/sandbox/server.crt
chmod 444 ${STEWARD_DIR}/sandbox/server.sha1
else
rm -f ${STEWARD_DIR}/db/server.key ${STEWARD_DIR}/sandbox/server.crt \
${STEWARD_DIR}/sandbox/server.sha1
echo "unable to create self-signed server certificate" 1>&2
RET=1
fi
exit $RET
|
