nickAS21
6 years ago
5 changed files with 719 additions and 85 deletions
@ -0,0 +1,403 @@ |
|||||
|
#!/bin/bash |
||||
|
# |
||||
|
# Copyright © 2016-2020 The Thingsboard Authors |
||||
|
# |
||||
|
# Licensed under the Apache License, Version 2.0 (the "License"); |
||||
|
# you may not use this file except in compliance with the License. |
||||
|
# You may obtain a copy of the License at |
||||
|
# |
||||
|
# http://www.apache.org/licenses/LICENSE-2.0 |
||||
|
# |
||||
|
# Unless required by applicable law or agreed to in writing, software |
||||
|
# distributed under the License is distributed on an "AS IS" BASIS, |
||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
|
# See the License for the specific language governing permissions and |
||||
|
# limitations under the License. |
||||
|
# |
||||
|
|
||||
|
#p) CLIENT_CN=LwX50900000000 |
||||
|
#s) client_start=0 |
||||
|
#f) client_finish=1 |
||||
|
#a) CLIENT_ALIAS=client_alias_00000000 |
||||
|
#b) BOOTSTRAP_ALIAS=bootstrap |
||||
|
#d) SERVER_ALIAS=server |
||||
|
#j) SERVER_STORE=serverKeyStore.jks |
||||
|
#k) CLIENT_STORE=clientKeyStore.jks |
||||
|
#c) CLIENT_STORE_PWD=client_ks_password |
||||
|
#w) SERVER_STORE_PWD=server_ks_password |
||||
|
|
||||
|
#while test $# -gt 0; do |
||||
|
# case "$1" in |
||||
|
# -h|--help) |
||||
|
# echo "$package - attempt to capture frames" |
||||
|
# echo " " |
||||
|
# echo "$package [options] application [arguments]" |
||||
|
# echo " " |
||||
|
# echo "options:" |
||||
|
# echo "-h, --help show brief help" |
||||
|
# echo "-a, --action=ACTION specify an action to use" |
||||
|
# echo "-o, --output-dir=DIR specify a directory to store output in" |
||||
|
# exit 0 |
||||
|
# ;; |
||||
|
# -a) |
||||
|
# shift |
||||
|
# if test $# -gt 0; then |
||||
|
# export PROCESS=$1 |
||||
|
# else |
||||
|
# echo "no process specified" |
||||
|
# exit 1 |
||||
|
# fi |
||||
|
# shift |
||||
|
# ;; |
||||
|
# --action*) |
||||
|
# export PROCESS=`echo $1 | sed -e 's/^[^=]*=//g'` |
||||
|
# shift |
||||
|
# ;; |
||||
|
# -o) |
||||
|
# shift |
||||
|
# if test $# -gt 0; then |
||||
|
# export OUTPUT=$1 |
||||
|
# else |
||||
|
# echo "no output dir specified" |
||||
|
# exit 1 |
||||
|
# fi |
||||
|
# shift |
||||
|
# ;; |
||||
|
# --output-dir*) |
||||
|
# export OUTPUT=`echo $1 | sed -e 's/^[^=]*=//g'` |
||||
|
# shift |
||||
|
# ;; |
||||
|
# *) |
||||
|
# break |
||||
|
# ;; |
||||
|
# esac |
||||
|
#done |
||||
|
|
||||
|
|
||||
|
while getopts p:s:f:a:b:d:j:k:c:w: flag; do |
||||
|
case "${flag}" in |
||||
|
p) client_prefix=${OPTARG} ;; |
||||
|
s) client_start=${OPTARG} ;; |
||||
|
f) client_finish=${OPTARG} ;; |
||||
|
a) client_alias=${OPTARG} ;; |
||||
|
b) bootstrap_alias=${OPTARG} ;; |
||||
|
d) server_alias=${OPTARG} ;; |
||||
|
j) key_store_server_file=${OPTARG} ;; |
||||
|
k) key_store_client_file=${OPTARG} ;; |
||||
|
c) client_key_store_pwd=${OPTARG} ;; |
||||
|
w) server_key_store_pwd=${OPTARG} ;; |
||||
|
esac |
||||
|
done |
||||
|
|
||||
|
# cd to dir of script |
||||
|
script_dir=$(dirname $0) |
||||
|
echo "script_dir: $script_dir" |
||||
|
cd $script_dir |
||||
|
# source the properties: |
||||
|
. ./lwM2M_keygen.properties |
||||
|
|
||||
|
|
||||
|
if [ -n "$client_prefix" ]; then |
||||
|
CLIENT_PREFIX=$client_prefix |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$client_start" ]; then |
||||
|
client_start=0 |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$client_finish" ]; then |
||||
|
client_finish=1 |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$client_alias" ]; then |
||||
|
CLIENT_ALIAS=$client_alias |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$bootstrap_alias" ]; then |
||||
|
BOOTSTRAP_ALIAS=$bootstrap_alias |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$server_alias" ]; then |
||||
|
SERVER_ALIAS=$server_alias |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$key_store_server_file" ]; then |
||||
|
SERVER_STORE=$key_store_server_file |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$key_store_client_file" ]; then |
||||
|
CLIENT_STORE=$key_store_client_file |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$client_key_store_pwd" ]; then |
||||
|
CLIENT_STORE_PWD=$client_key_store_pwd |
||||
|
fi |
||||
|
|
||||
|
if [ -n "$server_key_store_pwd" ]; then |
||||
|
SERVER_STORE_PWD=$server_key_store_pwd |
||||
|
fi |
||||
|
|
||||
|
echo "==Start==" |
||||
|
echo "CLIENT_PREFIX: $CLIENT_PREFIX" |
||||
|
echo "client_start: $client_start" |
||||
|
echo "client_finish: $client_finish" |
||||
|
echo "CLIENT_ALIAS: $CLIENT_ALIAS" |
||||
|
echo "BOOTSTRAP_ALIAS: $BOOTSTRAP_ALIAS" |
||||
|
echo "SERVER_ALIAS: $SERVER_ALIAS" |
||||
|
echo "SERVER_STORE: $SERVER_STORE" |
||||
|
echo "CLIENT_STORE: $CLIENT_STORE" |
||||
|
echo "CLIENT_STORE_PWD: $CLIENT_STORE_PWD" |
||||
|
echo "SERVER_STORE_PWD: $SERVER_STORE_PWD" |
||||
|
|
||||
|
end_point() { |
||||
|
echo "$CLIENT_PREFIX$(printf "%08d" $CLIENT_NUMBER)" |
||||
|
} |
||||
|
client_alias_point() { |
||||
|
echo "$CLIENT_ALIAS$(printf "%08d" $CLIENT_NUMBER)" |
||||
|
} |
||||
|
|
||||
|
# Generation of the keystore. |
||||
|
echo "${H0}====START========${RESET}" |
||||
|
echo "${H1}Server Keystore : ${RESET}" |
||||
|
echo "${H1}==================${RESET}" |
||||
|
echo "${H2}Creating the trusted root CA key and certificate...${RESET}" |
||||
|
# -keysize |
||||
|
# 1024 (when using -genkeypair) |
||||
|
keytool \ |
||||
|
-genkeypair \ |
||||
|
-alias $ROOT_KEY_ALIAS \ |
||||
|
-keyalg EC \ |
||||
|
-dname "CN=$ROOT_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-validity $VALIDITY \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-keypass $SERVER_STORE_PWD \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD |
||||
|
|
||||
|
echo |
||||
|
echo "${H2}Creating server key and self-signed certificate ...${RESET}" |
||||
|
keytool \ |
||||
|
-genkeypair \ |
||||
|
-alias $SERVER_ALIAS \ |
||||
|
-keyalg EC \ |
||||
|
-dname "CN=$SERVER_SELF_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-validity $VALIDITY \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-keypass $SERVER_STORE_PWD \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD |
||||
|
keytool \ |
||||
|
-exportcert \ |
||||
|
-alias $SERVER_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $SERVER_SELF_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD \ |
||||
|
-noprompt |
||||
|
|
||||
|
echo |
||||
|
echo "${H2}Creating server certificate signed by root CA...${RESET}" |
||||
|
keytool \ |
||||
|
-certreq \ |
||||
|
-alias $SERVER_ALIAS \ |
||||
|
-dname "CN=$SERVER_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD | |
||||
|
keytool \ |
||||
|
-gencert \ |
||||
|
-alias $ROOT_KEY_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-validity $VALIDITY | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $SERVER_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD |
||||
|
|
||||
|
echo |
||||
|
echo "${H2}Creating bootstrap key and self-signed certificate ...${RESET}" |
||||
|
keytool \ |
||||
|
-genkeypair \ |
||||
|
-alias $BOOTSTRAP_ALIAS \ |
||||
|
-keyalg EC \ |
||||
|
-dname "CN=$BOOTSTRAP_SELF_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-validity $VALIDITY \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-keypass $SERVER_STORE_PWD \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD |
||||
|
keytool \ |
||||
|
-exportcert \ |
||||
|
-alias $BOOTSTRAP_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $BOOTSTRAP_SELF_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD \ |
||||
|
-noprompt |
||||
|
|
||||
|
echo |
||||
|
echo "${H2}Creating bootstrap certificate signed by root CA...${RESET}" |
||||
|
keytool \ |
||||
|
-certreq \ |
||||
|
-alias $BOOTSTRAP_ALIAS \ |
||||
|
-dname "CN=$BOOTSTRAP_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD | |
||||
|
keytool \ |
||||
|
-gencert \ |
||||
|
-alias $ROOT_KEY_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-validity $VALIDITY | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $BOOTSTRAP_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD |
||||
|
|
||||
|
echo |
||||
|
echo "${H1}Client Keystore : ${RESET}" |
||||
|
echo "${H1}==================${RESET}" |
||||
|
#echo "${H2}Creating client key and self-signed certificate with expected CN...${RESET}" |
||||
|
#keytool \ |
||||
|
# -genkeypair \ |
||||
|
# -alias $CLIENT_ALIAS \ |
||||
|
# -keyalg EC \ |
||||
|
# -dname "CN=$CLIENT_SELF_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
# -validity $VALIDITY \ |
||||
|
# -storetype $STORETYPE \ |
||||
|
# -keypass $CLIENT_STORE_PWD \ |
||||
|
# -keystore $CLIENT_STORE \ |
||||
|
# -storepass $CLIENT_STORE_PWD |
||||
|
#keytool \ |
||||
|
# -exportcert \ |
||||
|
# -alias $CLIENT_ALIAS \ |
||||
|
# -keystore $CLIENT_STORE \ |
||||
|
# -storepass $CLIENT_STORE_PWD | \ |
||||
|
# keytool \ |
||||
|
# -importcert \ |
||||
|
# -alias $CLIENT_SELF_ALIAS \ |
||||
|
# -keystore $CLIENT_STORE \ |
||||
|
# -storepass $CLIENT_STORE_PWD \ |
||||
|
# -noprompt |
||||
|
|
||||
|
echo |
||||
|
echo "${H2}Import root certificate just to be able to import need by root CA with expected CN...${RESET}" |
||||
|
keytool \ |
||||
|
-exportcert \ |
||||
|
-alias $ROOT_KEY_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $ROOT_KEY_ALIAS \ |
||||
|
-keystore $CLIENT_STORE \ |
||||
|
-storepass $CLIENT_STORE_PWD \ |
||||
|
-noprompt |
||||
|
|
||||
|
#echo |
||||
|
#echo "${H2}Creating client certificate signed by root CA with expected CN...${RESET}" |
||||
|
#keytool \ |
||||
|
# -certreq \ |
||||
|
# -alias $CLIENT_ALIAS \ |
||||
|
# -dname "CN=$CLIENT_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
# -keystore $CLIENT_STORE \ |
||||
|
# -storepass $CLIENT_STORE_PWD | \ |
||||
|
# keytool \ |
||||
|
# -gencert \ |
||||
|
# -alias $ROOT_KEY_ALIAS \ |
||||
|
# -keystore $SERVER_STORE \ |
||||
|
# -storepass $SERVER_STORE_PWD \ |
||||
|
# -storetype $STORETYPE \ |
||||
|
# -validity $VALIDITY | \ |
||||
|
# keytool \ |
||||
|
# -importcert \ |
||||
|
# -alias $CLIENT_ALIAS \ |
||||
|
# -keystore $CLIENT_STORE \ |
||||
|
# -storepass $CLIENT_STORE_PWD \ |
||||
|
# -noprompt |
||||
|
|
||||
|
cert_end_point() { |
||||
|
echo "${H2}Creating client key and self-signed certificate with expected CN $CLIENT_SELF_CN ${RESET}" |
||||
|
keytool \ |
||||
|
-genkeypair \ |
||||
|
-alias $CLIENT_CN_ALIAS \ |
||||
|
-keyalg EC \ |
||||
|
-dname "CN=$CLIENT_SELF_CN, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-validity $VALIDITY \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-keypass $CLIENT_STORE_PWD \ |
||||
|
-keystore $CLIENT_STORE \ |
||||
|
-storepass $CLIENT_STORE_PWD |
||||
|
keytool \ |
||||
|
-exportcert \ |
||||
|
-alias $CLIENT_CN_ALIAS \ |
||||
|
-keystore $CLIENT_STORE \ |
||||
|
-storepass $CLIENT_STORE_PWD | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $CLIENT_SELF_ALIAS \ |
||||
|
-keystore $CLIENT_STORE \ |
||||
|
-storepass $CLIENT_STORE_PWD \ |
||||
|
-noprompt |
||||
|
|
||||
|
echo |
||||
|
echo "${H2}Creating client certificate signed by root CA with expected $CLIENT_CN_NAME ${RESET}" |
||||
|
keytool \ |
||||
|
-certreq \ |
||||
|
-alias $CLIENT_CN_ALIAS \ |
||||
|
-dname "CN=$CLIENT_CN_NAME, OU=$ORGANIZATIONAL_UNIT, O=$ORGANIZATION, L=$CITY, ST=$STATE_OR_PROVINCE, C=$TWO_LETTER_COUNTRY_CODE" \ |
||||
|
-keystore $CLIENT_STORE \ |
||||
|
-storepass $CLIENT_STORE_PWD | |
||||
|
keytool \ |
||||
|
-gencert \ |
||||
|
-alias $ROOT_KEY_ALIAS \ |
||||
|
-keystore $SERVER_STORE \ |
||||
|
-storepass $SERVER_STORE_PWD \ |
||||
|
-storetype $STORETYPE \ |
||||
|
-validity $VALIDITY | |
||||
|
keytool \ |
||||
|
-importcert \ |
||||
|
-alias $CLIENT_CN_ALIAS \ |
||||
|
-keystore $CLIENT_STORE \ |
||||
|
-storepass $CLIENT_STORE_PWD \ |
||||
|
-noprompt |
||||
|
} |
||||
|
|
||||
|
while [ "$CLIENT_NUMBER" != "$client_finish" ]; do |
||||
|
CLIENT_CN_NAME=$(end_point) |
||||
|
CLIENT_CN_ALIAS=$(client_alias_point) |
||||
|
echo "$CLIENT_CN_NAME" |
||||
|
echo "$CLIENT_CN_ALIAS" |
||||
|
cert_end_point |
||||
|
CLIENT_NUMBER=$(($CLIENT_NUMBER + 1)) |
||||
|
echo "number $CLIENT_NUMBER" |
||||
|
echo "finish $client_finish" |
||||
|
done |
||||
|
|
||||
|
echo |
||||
|
echo "${H0}!!! Warning ${H2}Migrate ${H1}${SERVER_STORE} ${H2}to ${H1}PKCS12 ${H2}which is an industry standard format..${RESET}" |
||||
|
keytool \ |
||||
|
-importkeystore \ |
||||
|
-srckeystore $SERVER_STORE \ |
||||
|
-destkeystore $SERVER_STORE \ |
||||
|
-deststoretype pkcs12 \ |
||||
|
-srcstorepass $SERVER_STORE_PWD |
||||
|
|
||||
|
echo |
||||
|
echo "${H0}!!! Warning ${H2}Migrate ${H1}${CLIENT_STORE} ${H2}to ${H1}PKCS12 ${H2}which is an industry standard format..${RESET}" |
||||
|
keytool \ |
||||
|
-importkeystore \ |
||||
|
-srckeystore $CLIENT_STORE \ |
||||
|
-destkeystore $CLIENT_STORE \ |
||||
|
-deststoretype pkcs12 \ |
||||
|
-srcstorepass $CLIENT_STORE_PWD |
||||
@ -0,0 +1,57 @@ |
|||||
|
# |
||||
|
# Copyright © 2016-2017 The Thingsboard Authors |
||||
|
# |
||||
|
# Licensed under the Apache License, Version 2.0 (the "License"); |
||||
|
# you may not use this file except in compliance with the License. |
||||
|
# You may obtain a copy of the License at |
||||
|
# |
||||
|
# http://www.apache.org/licenses/LICENSE-2.0 |
||||
|
# |
||||
|
# Unless required by applicable law or agreed to in writing, software |
||||
|
# distributed under the License is distributed on an "AS IS" BASIS, |
||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
|
# See the License for the specific language governing permissions and |
||||
|
# limitations under the License. |
||||
|
# |
||||
|
|
||||
|
# Keystore common parameters |
||||
|
ROOT_KEY_ALIAS=rootCA |
||||
|
DOMAIN_SUFFIX="$(hostname)" |
||||
|
ROOT_CN="$DOMAIN_SUFFIX $ROOT_KEY_ALIAS" |
||||
|
ORGANIZATIONAL_UNIT=Thingsboard |
||||
|
ORGANIZATION=Thingsboard |
||||
|
CITY=SF |
||||
|
STATE_OR_PROVINCE=CA |
||||
|
TWO_LETTER_COUNTRY_CODE=US |
||||
|
VALIDITY=36500 #days |
||||
|
STORETYPE="JKS" |
||||
|
|
||||
|
#Server |
||||
|
SERVER_STORE=serverKeyStore1.jks |
||||
|
SERVER_STORE_PWD=server_ks_password1 |
||||
|
SERVER_ALIAS=server1 |
||||
|
SERVER_CN="$DOMAIN_SUFFIX server LwM2M signed by root CA" |
||||
|
SERVER_SELF_ALIAS=server_self_signed |
||||
|
SERVER_SELF_CN="$DOMAIN_SUFFIX server LwM2M self-signed" |
||||
|
BOOTSTRAP_ALIAS=bootstrap1 |
||||
|
BOOTSTRAP_CN="$DOMAIN_SUFFIX bootstrap server LwM2M signed by root CA" |
||||
|
BOOTSTRAP_SELF_ALIAS=bootstrap_self_signed |
||||
|
BOOTSTRAP_SELF_CN="$DOMAIN_SUFFIX bootstrap server LwM2M self-signed" |
||||
|
|
||||
|
# Client |
||||
|
CLIENT_STORE=clientKeyStore1.jks |
||||
|
CLIENT_STORE_PWD=client_ks_password1 |
||||
|
CLIENT_ALIAS=client_alias_1 |
||||
|
CLIENT_PREFIX=LwX509_ |
||||
|
CLIENT_SELF_ALIAS=client_self_signed |
||||
|
CLIENT_SELF_CN="$DOMAIN_SUFFIX client LwM2M self-signed" |
||||
|
|
||||
|
# Color output stuff |
||||
|
red=`tput setaf 1` |
||||
|
green=`tput setaf 2` |
||||
|
blue=`tput setaf 4` |
||||
|
bold=`tput bold` |
||||
|
H0=${red}${bold} |
||||
|
H1=${green}${bold} |
||||
|
H2=${blue} |
||||
|
RESET=`tput sgr0` |
||||
Loading…
Reference in new issue