From 11140fe89ba5283d9a76723f8afa0f58d9d612ac Mon Sep 17 00:00:00 2001 From: nickAS21 Date: Sun, 30 Jan 2022 22:24:29 +0200 Subject: [PATCH] lwm2m: del shell from tests --- ...cfssl_chain_trusts_and_clients_for_test.sh | 299 ------------------ .../shell/lwm2m_cfssl_chain_for_test_All.sh | 65 ---- .../lwm2m_cfssl_chain_server_for_test.sh | 298 ----------------- 3 files changed, 662 deletions(-) delete mode 100755 application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh delete mode 100755 application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh delete mode 100755 application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh diff --git a/application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh b/application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh deleted file mode 100755 index 26f47266a7..0000000000 --- a/application/src/test/resources/lwm2m/credentials/shell/lwM2M_cfssl_chain_trusts_and_clients_for_test.sh +++ /dev/null @@ -1,299 +0,0 @@ -#!/usr/bin/env bash - -# Change working directory -cd -- "$( - dirname "${0}" -)" || exit 1 - -readonly TRUST_PATH="Trust" -readonly CA_ROOT_CERT_KEY="ca-root" -readonly CA_ROOT_ALIAS="root" -readonly CA_INTERMEDIATE_CERT_KEY_PREF="intermediate_ca" -CA_INTERMEDIATE_START=0 -CA_INTERMEDIATE_FINISH=2 -CA_INTERMEDIATE_NUMBER=${CA_INTERMEDIATE_START} -CA_INTERMEDIATE_CERT_SIGN=${CA_ROOT_CERT_KEY} -CA_LIST_CERT_FOR_CAT="" -readonly CA_TRUST_STORE_ALL_CHAIN="lwm2mtruststorechain" -readonly CA_TRUST_STORE_PWD="server_ks_password" -readonly CA_TRUST_CERT_ALIAS="root" -readonly CA_TRUST_CERT_CHAIN_JKS="lwm2mtruststorechain" -readonly CA_TRUST_STORE_CHAIN_ALIAS="trust_cert_chain_alias" - -readonly CLIENT_PATH="Client" -readonly CLIENT_JKS_FOR_TEST="lwm2mclient" -readonly CLIENT_CERT_KEY_PREF="LwX509" -readonly CLIENT_CERT_ALIAS_PREF="client_alias_" -readonly CLIENT_STORE_PWD="client_ks_password" -readonly CLIENT_HOST_NAME="thingsboard_test.io" -CLIENT_START=0 -CLIENT_FINISH=1 -CLIENT_NUMBER=${CLIENT_START} - -SERVER_HOST_NAME="localhost.localdomain" -SERVER_LOCAL_HOST_NAME="localhost" -SERVER_PUBLIC_HOST_NAMES="-" - -readonly CF_COMMANDS=" - cfssl - cfssljson -" - -if [ ! -z "$1" ]; then - CA_INTERMEDIATE_START=$1 - CA_INTERMEDIATE_NUMBER=${CA_INTERMEDIATE_START} -fi - -if [ ! -z "$2" ]; then - CA_INTERMEDIATE_FINISH=$2 -fi - -if [ ! -z "$3" ]; then - CLIENT_START=$1 - CLIENT_NUMBER=${CLIENT_START} -fi - -if [ ! -z "$4" ]; then - CLIENT_FINISH=$4 -fi - -# Change working directory -rm -rf ${TRUST_PATH} -mkdir -p ${TRUST_PATH} -rm -rf ${CLIENT_PATH} -mkdir -p ${CLIENT_PATH} -cd -- "$( - dirname "${0}" -)" || exit 1 - - -rm *.csr -rm *.p12 -rm *.json -rm *.pem -rm *.jks - -intermediate_common_name() { - echo "${CA_INTERMEDIATE_CERT_KEY_PREF}${CA_INTERMEDIATE_NUMBER}" -} - -set_list_sert_for_cat() { - local first="$1" - echo "$first ${CA_LIST_CERT_FOR_CAT}" -} - -client_common_name() { - echo "${CLIENT_CERT_KEY_PREF}$(printf "%08d" ${CLIENT_NUMBER})" -} - -client_alias_name() { - echo "${CLIENT_CERT_ALIAS_PREF}$(printf "%08d" ${CLIENT_NUMBER})" -} - -for COMMAND in ${CF_COMMANDS}; do - if ! command -v ${COMMAND} &> /dev/null; then - echo "ERROR: Missing command ${COMMAND}" >&2 - echo "Install the package from: https://pkg.cfssl.org/" >&2 - exit 1 - fi -done - -tee ./${TRUST_PATH}/ca-config.json 1> /dev/null <<-CONFIG -{ - "signing": { - "default": { - "expiry": "8760h", - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ] - }, - "profiles": { - "server": { - "expiry": "43800h", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "signing", - "key encipherment", - "server auth" - ] - }, - "client": { - "expiry": "43800h", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "signing", - "key encipherment", - "client auth" - ] - }, - "client-server": { - "expiry": "43800h", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "signing", - "key encipherment", - "server auth", - "client auth" - ] - } - } - } -} -CONFIG - -tee ./${TRUST_PATH}/ca-root-to-intermediate-config.json 1> /dev/null <<-CONFIG -{ - "signing": { - "default": { - "expiry": "43800h", - "ca_constraint": { - "is_ca": true, - "max_path_len": 0, - "max_path_len_zero": true - }, - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "digital signature", - "cert sign", - "crl sign", - "signing" - ] - } - } -} -CONFIG - -echo "====================================================" -echo -e "Generate the root of certificates: \n-${CA_ROOT_KEY}-key.pem (certificate key)\n-${CA_ROOT_KEY}.pem (certificate)\n-${CA_ROOT_KEY}.csr (sign request)" -echo "====================================================" -cfssl genkey \ - -initca \ - - \ - <<-CONFIG | cfssljson -bare ./${TRUST_PATH}/${CA_ROOT_CERT_KEY} -{ - "CN": "ROOT CA", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ], - "ca": { - "expiry": "131400h" - } -} -CONFIG -CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}.pem) - -echo "====================================================" -echo -e "Generate and Signed the intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY_PREF}?-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY_PREF}?.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY_PREF}?.csr (sign request)" -echo "====================================================" - -while [[ ${CA_INTERMEDIATE_NUMBER} -lt ${CA_INTERMEDIATE_FINISH} ]]; -do - CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name) - CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1)) - - cfssl gencert \ - -ca ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \ - -ca-key ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \ - -config ./${TRUST_PATH}/ca-root-to-intermediate-config.json \ - -hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ - - \ - <<-CONFIG | cfssljson -bare ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY} - { - "CN": "${CA_INTERMEDIATE_CERT_KEY}", - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ] - } -CONFIG - #openssl x509 -in ${CA_INTERMEDIATE_CERT_KEY}.pem -text -noout - CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem) - CA_INTERMEDIATE_CERT_SIGN=${CA_INTERMEDIATE_CERT_KEY} -done - -echo "====================================================" -echo -e "Add the CA_certificate to keystore: ${CA_TRUST_CERT_CHAIN_JKS}.jks" -echo "====================================================" -cat ${CA_LIST_CERT_FOR_CAT} > ./${TRUST_PATH}/${CA_TRUST_STORE_ALL_CHAIN}.pem -openssl pkcs12 -export -in ./${TRUST_PATH}/${CA_TRUST_STORE_ALL_CHAIN}.pem -inkey ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem -out ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.p12 -name ${CA_TRUST_STORE_CHAIN_ALIAS} -CAfile ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${CA_TRUST_STORE_PWD} -passout pass:${CA_TRUST_STORE_PWD} -keytool -importkeystore -deststorepass ${CA_TRUST_STORE_PWD} -destkeypass ${CA_TRUST_STORE_PWD} -destkeystore ./${TRUST_PATH}/${CA_TRUST_CERT_CHAIN_JKS}.jks -srckeystore ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${CA_TRUST_STORE_PWD} -alias ${CA_TRUST_STORE_CHAIN_ALIAS} - -keytool -list -v -keystore ./${TRUST_PATH}/lwm2mtruststorechain.jks -storepass server_ks_password -storetype PKCS12 - -echo "====================================================" -echo -e "Generate and Signed the clients of our certificates: \n-${CLIENT_CERT_KEY_PREF}?-key.pem (certificate key)\n-${CLIENT_CERT_KEY_PREF}?.pem (certificate)\n-${CCLIENT_CERT_KEY_PREF}?.csr (sign request)" -echo "====================================================" - - -while [[ ${CLIENT_NUMBER} -lt ${CLIENT_FINISH} ]]; -do - CLIENT_CERT_KEY=$(client_common_name) - CLIENT_CERT_ALIAS=$(client_alias_name) - CLIENT_NUMBER=$((${CLIENT_NUMBER} + 1)) - - cfssl gencert \ - -ca ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \ - -ca-key ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \ - -config ./${TRUST_PATH}/ca-config.json \ - -profile client \ - -hostname "${CLIENT_HOST_NAME}" \ - - \ - <<-CONFIG | cfssljson -bare ./${CLIENT_PATH}/${CLIENT_CERT_KEY} -{ - "CN": "${CLIENT_CERT_KEY}" -} -CONFIG - -echo "====================================================" -echo -e "Add the client certificate (${CLIENT_CERT_KEY}.pem) to keystore: ${CLIENT_JKS_FOR_TEST}.jks" -echo "====================================================" -cat ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${CLIENT_PATH}/${CLIENT_CERT_KEY}_chain.pem -openssl pkcs12 -export -in ./${CLIENT_PATH}/${CLIENT_CERT_KEY}_chain.pem -inkey ./${CLIENT_PATH}/${CLIENT_CERT_KEY}-key.pem -out ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.p12 -name ${CLIENT_CERT_ALIAS} -CAfile ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${CLIENT_STORE_PWD} -passout pass:${CLIENT_STORE_PWD} -keytool -importkeystore -deststorepass ${CLIENT_STORE_PWD} -destkeypass ${CLIENT_STORE_PWD} -destkeystore ./${CLIENT_PATH}/${CLIENT_JKS_FOR_TEST}.jks -srckeystore ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${CLIENT_STORE_PWD} -alias ${CLIENT_CERT_ALIAS} - -done - -keytool -list -v -keystore ./${CLIENT_PATH}/lwm2mclient.jks -storepass client_ks_password -storetype PKCS12 - -rm ./${TRUST_PATH}/*.p12 -rm ./${TRUST_PATH}/*.csr -rm ./${TRUST_PATH}/*.json -rm ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}* -rm ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY_PREF}* - - -rm ./${CLIENT_PATH}/*.p12 2> /dev/null -rm ./${CLIENT_PATH}/*.csr 2> /dev/null diff --git a/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh b/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh deleted file mode 100755 index b3b114cb28..0000000000 --- a/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_for_test_All.sh +++ /dev/null @@ -1,65 +0,0 @@ -#!/usr/bin/env bash - -readonly INTERMEDIATE_START=0 -readonly INTERMEDIATE_FINISH=2 -readonly CLIENT_START=0 -readonly CLIENT_FINISH=5 - -IS_IHFO=false -IS_SERVER_CREATED_KEY=true -IS_TRUST_CLIENT_CREATED_KEY=true - -cd -- "$( - dirname "${0}" -)" || exit 1 - -Help() -{ - # Display Help - echo "Description of the script functions." - echo - echo "Syntax: scriptTemplate [-g|h|v|V]" - echo "options:" - echo "h Print this Help." - echo "v Verbose mode." - echo "V Print software version and exit." - echo -} - -if [ "$1" == "-h" ] ; then - echo -e "Usage 2: ./`basename $0` \"Information is not displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are generated\"" - echo -e "Usage 1: ./`basename $0` true \"Information is displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are generated\"" - echo -e "Usage 3: ./`basename $0` true false \"Information is displayed\" : \"Keys for the server are not generated\" : \"Keys for the clients and trusts are generated\"" - echo -e "Usage 4: ./`basename $0` true false false \"Information is displayed\" : \"Keys for the server are not generated\" : \"Keys for the clients and trusts are not generated\"" - echo -e "Usage 4: ./`basename $0` true true false \"Information is displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are not generated\"" - echo "This Help File: ./`basename $0` -h" - exit 0 -fi - -if [ -n "$1" ]; then - IS_IHFO=$1 -fi - -if [ -n "$2" ]; then - IS_SERVER_CREATED_KEY=$2 -fi - -if [ -n "$3" ]; then - IS_TRUST_CLIENT_CREATED_KEY=$3 -fi - -if [ "$IS_IHFO" = false ] ; then - if [ "$IS_SERVER_CREATED_KEY" = true ] ; then - ./lwm2m_cfssl_chain_server_for_test.sh > /dev/null 2>&1 & - fi - if [ "$IS_TRUST_CLIENT_CREATED_KEY" = true ] ; then - ./lwM2M_cfssl_chain_trusts_and_clients_for_test.sh ${INTERMEDIATE_START} ${INTERMEDIATE_FINISH} ${CLIENT_START} ${CLIENT_FINISH} > /dev/null 2>&1 & - fi -else - if [ "$IS_SERVER_CREATED_KEY" = true ] ; then - ./lwm2m_cfssl_chain_server_for_test.sh - fi - if [ "$IS_TRUST_CLIENT_CREATED_KEY" = true ] ; then - ./lwM2M_cfssl_chain_trusts_and_clients_for_test.sh ${INTERMEDIATE_START} ${INTERMEDIATE_FINISH} ${CLIENT_START} ${CLIENT_FINISH} - fi -fi \ No newline at end of file diff --git a/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh b/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh deleted file mode 100755 index efe6ed46dd..0000000000 --- a/application/src/test/resources/lwm2m/credentials/shell/lwm2m_cfssl_chain_server_for_test.sh +++ /dev/null @@ -1,298 +0,0 @@ -#!/usr/bin/env bash - -# REF: https://github.com/cloudflare/cfssl - -# Change working directory -cd -- "$( - dirname "${0}" -)" || exit 1 - -readonly CA_ROOT_CERT_KEY="ca-root" -readonly CA_ROOT_ALIAS="root" -readonly CA_INTERMEDIATE_CERT_KEY_PREF="intermediate_ca" -CA_INTERMEDIATE_NUMBER=0 -CA_LIST_CERT_FOR_CAT="" - -readonly CF_COMMANDS=" - cfssl - cfssljson -" - -readonly SERVER_JKS_FOR_TEST="lwm2mserver" -readonly STORE_PASS_PWD="server_ks_password" -readonly SERVER_PATH="Server" -readonly SERVER_CERT_KEY="lwm2mserver" -readonly SERVER_CERT_CHAIN="lwm2mserver_chain" -readonly SERVER_CERT_ALIAS="server" -readonly BS_SERVER_CERT_KEY="lwm2mserverbs" -readonly BS_SERVER_CERT_CHAIN="lwm2mserverbs_chain" -readonly BS_SERVER_CERT_ALIAS="bootstrap" - -SERVER_HOST_NAME="localhost.localdomain" -SERVER_LOCAL_HOST_NAME="localhost" -SERVER_PUBLIC_HOST_NAMES="-" - -intermediate_common_name() { - echo "${CA_INTERMEDIATE_CERT_KEY_PREF}${CA_INTERMEDIATE_NUMBER}" -} - -set_list_sert_for_cat() { - local first="$1" - echo "$first ${CA_LIST_CERT_FOR_CAT}" -} - - -# Change working directory -rm -rf ${SERVER_PATH} -mkdir -p ${SERVER_PATH} - -cd -- "$( - dirname ./${SERVER_PATH} -)" || exit 1 - - -rm *.csr -rm *.p12 -rm *.json -rm *.pem -rm *.jks - -CA_INTERMEDIATE_CERT_SIGN=${CA_ROOT_CERT_KEY} -CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name) -CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1)) -CA_LIST_CERT_FOR_CAT="" - -for COMMAND in ${CF_COMMANDS}; do - if ! command -v ${COMMAND} &> /dev/null; then - echo "ERROR: Missing command ${COMMAND}" >&2 - echo "Install the package from: https://pkg.cfssl.org/" >&2 - exit 1 - fi -done - -tee ./${SERVER_PATH}/ca-config.json 1> /dev/null <<-CONFIG -{ - "signing": { - "default": { - "expiry": "8760h", - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ] - }, - "profiles": { - "server": { - "expiry": "43800h", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "signing", - "key encipherment", - "server auth" - ] - }, - "client": { - "expiry": "43800h", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "signing", - "key encipherment", - "client auth" - ] - }, - "client-server": { - "expiry": "43800h", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "signing", - "key encipherment", - "server auth", - "client auth" - ] - } - } - } -} -CONFIG - -tee ./${SERVER_PATH}/ca-root-to-intermediate-config.json 1> /dev/null <<-CONFIG -{ - "signing": { - "default": { - "expiry": "43800h", - "ca_constraint": { - "is_ca": true, - "max_path_len": 0, - "max_path_len_zero": true - }, - "key": { - "algo": "ecdsa", - "size": 256 - }, - "usages": [ - "digital signature", - "cert sign", - "crl sign", - "signing" - ] - } - } -} -CONFIG - -echo "====================================================" -echo -e "Generate the root of certificates: \n-${CA_ROOT_KEY}-key.pem (certificate key)\n-${CA_ROOT_KEY}.pem (certificate)\n-${CA_ROOT_KEY}.csr (sign request)" -echo "====================================================" -cfssl genkey \ - -initca \ - - \ - <<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_ROOT_CERT_KEY} -{ - "CN": "ROOT CA for servers", - "key": { - "algo": "ecdsa", - "size": 256 - }, - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ], - "ca": { - "expiry": "131400h" - } -} -CONFIG -CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}.pem) - -echo "====================================================" -echo -e "Generate and Signed the first intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY}-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY}.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY}.csr (sign request)" -echo "====================================================" -cfssl gencert \ - -ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \ - -ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \ - -config ./${SERVER_PATH}/ca-root-to-intermediate-config.json \ - -hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ - - \ - <<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY} -{ - "CN": "${CA_INTERMEDIATE_CERT_KEY}", - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ] -} -CONFIG -CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem) - - -## Lwm2m Server certificate -echo "====================================================" -echo -e "Generate and Signed the server certificate: \n-${SERVER_CERT_KEY}-key.pem (certificate key)\n-${SERVER_CERT_KEY}.pem (certificate)\n-${SERVER_CERT_KEY}.csr (sign request)" -echo "====================================================" -cfssl gencert \ - -ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \ - -ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \ - -config ./${SERVER_PATH}/ca-config.json \ - -profile server \ - -hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ - - \ - <<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${SERVER_CERT_KEY} -{ - "CN": "${SERVER_LOCAL_HOST_NAME}" -} -CONFIG - -echo "====================================================" -echo -e "Add the server certificate (${SERVER_CERT_KEY}.pem) to keystore: ${SERVER_JKS_FOR_TEST}.jks" -echo "====================================================" -cat ./${SERVER_PATH}/${SERVER_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${SERVER_PATH}/${SERVER_CERT_CHAIN}.pem -openssl pkcs12 -export -in ./${SERVER_PATH}/${SERVER_CERT_CHAIN}.pem -inkey ./${SERVER_PATH}/${SERVER_CERT_KEY}-key.pem -out ./${SERVER_PATH}/${SERVER_CERT_KEY}.p12 -name ${SERVER_CERT_ALIAS} -CAfile ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${STORE_PASS_PWD} -passout pass:${STORE_PASS_PWD} -keytool -importkeystore -deststorepass ${STORE_PASS_PWD} -destkeypass ${STORE_PASS_PWD} -destkeystore ./${SERVER_PATH}/${SERVER_JKS_FOR_TEST}.jks -srckeystore ./${SERVER_PATH}/${SERVER_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${STORE_PASS_PWD} -alias ${SERVER_CERT_ALIAS} - - -CA_INTERMEDIATE_CERT_SIGN=${CA_INTERMEDIATE_CERT_KEY} -CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name) -CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1)) -echo "====================================================" -echo -e "Generate and Signed the second intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY}-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY}.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY}.csr (sign request)" -echo "====================================================" -cfssl gencert \ - -ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \ - -ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \ - -config ./${SERVER_PATH}/ca-root-to-intermediate-config.json \ - -hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ - - \ - <<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY} -{ - "CN": "${CA_INTERMEDIATE_CERT_KEY}", - "names": [ - { - "C": "UK", - "ST": "Kyiv city", - "L": "Kyiv", - "O": "Thingsboard", - "OU": "DEVELOPER_TEST" - } - ] -} -CONFIG -CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem) - -## Bootstrap server certificate -echo "====================================================" -echo -e "Generate and Signed the server certificate: \n-${BS_SERVER_CERT_KEY}-key.pem (certificate key)\n-${BS_SERVER_CERT_KEY}.pem (certificate)\n-${BS_SERVER_CERT_KEY}.csr (sign request)" -echo "====================================================" -cfssl gencert \ - -ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \ - -ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \ - -config ./${SERVER_PATH}/ca-config.json \ - -profile server \ - -hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ - - \ - <<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${BS_SERVER_CERT_KEY} -{ - "CN": "${SERVER_LOCAL_HOST_NAME}" -} -CONFIG - -echo "====================================================" -echo -e "Add the Bootstrap server certificate (${BS_SERVER_CERT_KEY}.pem) to keystore: ${SERVER_JKS_FOR_TEST}.jks" -echo "====================================================" -cat ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${SERVER_PATH}/${BS_SERVER_CERT_CHAIN}.pem -openssl pkcs12 -export -in ./${SERVER_PATH}/${BS_SERVER_CERT_CHAIN}.pem -inkey ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}-key.pem -out ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.p12 -name ${BS_SERVER_CERT_ALIAS} -CAfile ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${STORE_PASS_PWD} -passout pass:${STORE_PASS_PWD} -keytool -importkeystore -deststorepass ${STORE_PASS_PWD} -destkeypass ${STORE_PASS_PWD} -destkeystore ./${SERVER_PATH}/${SERVER_JKS_FOR_TEST}.jks -srckeystore ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${STORE_PASS_PWD} -alias ${BS_SERVER_CERT_ALIAS} - - -keytool -list -v -keystore ./${SERVER_PATH}/lwm2mserver.jks -storepass server_ks_password -storetype PKCS12 - -rm ./${SERVER_PATH}/*.p12 2> /dev/null -rm ./${SERVER_PATH}/*.csr 2> /dev/null -rm ./${SERVER_PATH}/*.json 2> /dev/null -rm ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY_PREF}* 2> /dev/null -rm ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}* 2> /dev/null -mv ./${SERVER_PATH}/${SERVER_CERT_KEY}-key.pem ./${SERVER_PATH}/${SERVER_CERT_KEY}_key.pem -mv ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}-key.pem ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}_key.pem -