Andrew Shvayka
5 years ago
committed by
GitHub
GitHub
34 changed files with 1732 additions and 1259 deletions
@ -0,0 +1,235 @@ |
|||||
|
/** |
||||
|
* Copyright © 2016-2022 The Thingsboard Authors |
||||
|
* |
||||
|
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
|
* you may not use this file except in compliance with the License. |
||||
|
* You may obtain a copy of the License at |
||||
|
* |
||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
* |
||||
|
* Unless required by applicable law or agreed to in writing, software |
||||
|
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
|
* See the License for the specific language governing permissions and |
||||
|
* limitations under the License. |
||||
|
*/ |
||||
|
package org.thingsboard.server.transport.lwm2m.client; |
||||
|
|
||||
|
import lombok.extern.slf4j.Slf4j; |
||||
|
import org.eclipse.leshan.client.resource.BaseInstanceEnabler; |
||||
|
import org.eclipse.leshan.client.resource.LwM2mInstanceEnabler; |
||||
|
import org.eclipse.leshan.client.servers.ServerIdentity; |
||||
|
import org.eclipse.leshan.core.model.ObjectModel; |
||||
|
import org.eclipse.leshan.core.model.ResourceModel.Type; |
||||
|
import org.eclipse.leshan.core.node.LwM2mResource; |
||||
|
import org.eclipse.leshan.core.request.BindingMode; |
||||
|
import org.eclipse.leshan.core.response.ExecuteResponse; |
||||
|
import org.eclipse.leshan.core.response.ReadResponse; |
||||
|
import org.eclipse.leshan.core.response.WriteResponse; |
||||
|
import org.slf4j.Logger; |
||||
|
import org.slf4j.LoggerFactory; |
||||
|
|
||||
|
import java.util.Arrays; |
||||
|
import java.util.EnumSet; |
||||
|
import java.util.List; |
||||
|
import java.util.Objects; |
||||
|
|
||||
|
/** |
||||
|
* A simple {@link LwM2mInstanceEnabler} for the Server (1) object. |
||||
|
*/ |
||||
|
@Slf4j |
||||
|
public class Lwm2mServer extends BaseInstanceEnabler { |
||||
|
|
||||
|
private static final Logger LOG = LoggerFactory.getLogger(Lwm2mServer.class); |
||||
|
|
||||
|
private final static List<Integer> supportedResources = Arrays.asList(0, 1, 2, 3, 6, 7, 8, 22); |
||||
|
|
||||
|
private int shortServerId; |
||||
|
private long lifetime; |
||||
|
private Long defaultMinPeriod; |
||||
|
private Long defaultMaxPeriod; |
||||
|
private EnumSet<BindingMode> binding; |
||||
|
private BindingMode preferredTransport; |
||||
|
private boolean notifyWhenDisable; |
||||
|
|
||||
|
public Lwm2mServer() { |
||||
|
// should only be used at bootstrap time
|
||||
|
} |
||||
|
|
||||
|
public Lwm2mServer(int shortServerId, long lifetime, EnumSet<BindingMode> binding, boolean notifyWhenDisable, |
||||
|
BindingMode preferredTransport) { |
||||
|
this.shortServerId = shortServerId; |
||||
|
this.lifetime = lifetime; |
||||
|
this.binding = binding; |
||||
|
this.notifyWhenDisable = notifyWhenDisable; |
||||
|
this.preferredTransport = preferredTransport; |
||||
|
} |
||||
|
|
||||
|
public Lwm2mServer(int shortServerId, long lifetime) { |
||||
|
this(shortServerId, lifetime, EnumSet.of(BindingMode.U), false, BindingMode.U); |
||||
|
} |
||||
|
|
||||
|
@Override |
||||
|
public ReadResponse read(ServerIdentity identity, int resourceid) { |
||||
|
if (!identity.isSystem()) |
||||
|
LOG.debug("Read on Server resource /{}/{}/{}", getModel().id, getId(), resourceid); |
||||
|
|
||||
|
switch (resourceid) { |
||||
|
case 0: // short server ID
|
||||
|
return ReadResponse.success(resourceid, shortServerId); |
||||
|
|
||||
|
case 1: // lifetime
|
||||
|
return ReadResponse.success(resourceid, lifetime); |
||||
|
|
||||
|
case 2: // default min period
|
||||
|
if (null == defaultMinPeriod) |
||||
|
return ReadResponse.notFound(); |
||||
|
return ReadResponse.success(resourceid, defaultMinPeriod); |
||||
|
|
||||
|
case 3: // default max period
|
||||
|
if (null == defaultMaxPeriod) |
||||
|
return ReadResponse.notFound(); |
||||
|
return ReadResponse.success(resourceid, defaultMaxPeriod); |
||||
|
|
||||
|
case 6: // notification storing when disable or offline
|
||||
|
return ReadResponse.success(resourceid, notifyWhenDisable); |
||||
|
|
||||
|
case 7: // binding
|
||||
|
return ReadResponse.success(resourceid, BindingMode.toString(binding)); |
||||
|
|
||||
|
case 22: // preferred transport
|
||||
|
if (preferredTransport == null) |
||||
|
return ReadResponse.notFound(); |
||||
|
return ReadResponse.success(resourceid, preferredTransport.toString()); |
||||
|
|
||||
|
default: |
||||
|
return super.read(identity, resourceid); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
@Override |
||||
|
public WriteResponse write(ServerIdentity identity, boolean replace, int resourceid, LwM2mResource value) { |
||||
|
if (!identity.isSystem()) |
||||
|
log.debug("Write on Server resource /{}/{}/{}", getModel().id, getId(), resourceid); |
||||
|
|
||||
|
switch (resourceid) { |
||||
|
case 0: |
||||
|
if (value.getType() != Type.INTEGER) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
int previousShortServerId = shortServerId; |
||||
|
shortServerId = ((Long) value.getValue()).intValue(); |
||||
|
if (previousShortServerId != shortServerId) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
|
||||
|
case 1: |
||||
|
if (value.getType() != Type.INTEGER) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
long previousLifetime = lifetime; |
||||
|
lifetime = (Long) value.getValue(); |
||||
|
if (previousLifetime != lifetime) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
|
||||
|
case 2: |
||||
|
if (value.getType() != Type.INTEGER) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
Long previousDefaultMinPeriod = defaultMinPeriod; |
||||
|
defaultMinPeriod = (Long) value.getValue(); |
||||
|
if (!Objects.equals(previousDefaultMinPeriod, defaultMinPeriod)) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
|
||||
|
case 3: |
||||
|
if (value.getType() != Type.INTEGER) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
Long previousDefaultMaxPeriod = defaultMaxPeriod; |
||||
|
defaultMaxPeriod = (Long) value.getValue(); |
||||
|
if (!Objects.equals(previousDefaultMaxPeriod, defaultMaxPeriod)) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
|
||||
|
case 6: // notification storing when disable or offline
|
||||
|
if (value.getType() != Type.BOOLEAN) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
boolean previousNotifyWhenDisable = notifyWhenDisable; |
||||
|
notifyWhenDisable = (boolean) value.getValue(); |
||||
|
if (previousNotifyWhenDisable != notifyWhenDisable) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
|
||||
|
case 7: // binding
|
||||
|
if (value.getType() != Type.STRING) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
try { |
||||
|
EnumSet<BindingMode> previousBinding = binding; |
||||
|
binding = BindingMode.parse((String) value.getValue()); |
||||
|
if (!Objects.equals(previousBinding, binding)) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
} catch (IllegalArgumentException e) { |
||||
|
return WriteResponse.badRequest("invalid value"); |
||||
|
} |
||||
|
case 22: // preferredTransport
|
||||
|
if (value.getType() != Type.STRING) { |
||||
|
return WriteResponse.badRequest("invalid type"); |
||||
|
} |
||||
|
try { |
||||
|
BindingMode previousPreferedTransport = preferredTransport; |
||||
|
preferredTransport = BindingMode.valueOf((String) value.getValue()); |
||||
|
if (!Objects.equals(previousPreferedTransport, preferredTransport)) |
||||
|
fireResourceChange(resourceid); |
||||
|
return WriteResponse.success(); |
||||
|
} catch (IllegalArgumentException e) { |
||||
|
return WriteResponse.badRequest("invalid value"); |
||||
|
} |
||||
|
|
||||
|
default: |
||||
|
return super.write(identity, replace, resourceid, value); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
@Override |
||||
|
public ExecuteResponse execute(ServerIdentity identity, int resourceid, String params) { |
||||
|
log.info("Execute on Server resource /{}/{}/{}", getModel().id, getId(), resourceid); |
||||
|
if (resourceid == 8) { |
||||
|
getLwM2mClient().triggerRegistrationUpdate(identity); |
||||
|
return ExecuteResponse.success(); |
||||
|
} else if (resourceid == 9) { |
||||
|
boolean success = getLwM2mClient().triggerClientInitiatedBootstrap(true); |
||||
|
if (success) { |
||||
|
return ExecuteResponse.success(); |
||||
|
} |
||||
|
else { |
||||
|
return ExecuteResponse.badRequest("probably no bootstrap server configured"); |
||||
|
} |
||||
|
} else { |
||||
|
return super.execute(identity, resourceid, params); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
@Override |
||||
|
public void reset(int resourceid) { |
||||
|
switch (resourceid) { |
||||
|
case 2: |
||||
|
defaultMinPeriod = null; |
||||
|
break; |
||||
|
case 3: |
||||
|
defaultMaxPeriod = null; |
||||
|
break; |
||||
|
default: |
||||
|
super.reset(resourceid); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
@Override |
||||
|
public List<Integer> getAvailableResourceIds(ObjectModel model) { |
||||
|
return supportedResources; |
||||
|
} |
||||
|
} |
||||
@ -1,299 +0,0 @@ |
|||||
#!/usr/bin/env bash |
|
||||
|
|
||||
# Change working directory |
|
||||
cd -- "$( |
|
||||
dirname "${0}" |
|
||||
)" || exit 1 |
|
||||
|
|
||||
readonly TRUST_PATH="Trust" |
|
||||
readonly CA_ROOT_CERT_KEY="ca-root" |
|
||||
readonly CA_ROOT_ALIAS="root" |
|
||||
readonly CA_INTERMEDIATE_CERT_KEY_PREF="intermediate_ca" |
|
||||
CA_INTERMEDIATE_START=0 |
|
||||
CA_INTERMEDIATE_FINISH=2 |
|
||||
CA_INTERMEDIATE_NUMBER=${CA_INTERMEDIATE_START} |
|
||||
CA_INTERMEDIATE_CERT_SIGN=${CA_ROOT_CERT_KEY} |
|
||||
CA_LIST_CERT_FOR_CAT="" |
|
||||
readonly CA_TRUST_STORE_ALL_CHAIN="lwm2mtruststorechain" |
|
||||
readonly CA_TRUST_STORE_PWD="server_ks_password" |
|
||||
readonly CA_TRUST_CERT_ALIAS="root" |
|
||||
readonly CA_TRUST_CERT_CHAIN_JKS="lwm2mtruststorechain" |
|
||||
readonly CA_TRUST_STORE_CHAIN_ALIAS="trust_cert_chain_alias" |
|
||||
|
|
||||
readonly CLIENT_PATH="Client" |
|
||||
readonly CLIENT_JKS_FOR_TEST="lwm2mclient" |
|
||||
readonly CLIENT_CERT_KEY_PREF="LwX509" |
|
||||
readonly CLIENT_CERT_ALIAS_PREF="client_alias_" |
|
||||
readonly CLIENT_STORE_PWD="client_ks_password" |
|
||||
readonly CLIENT_HOST_NAME="thingsboard_test.io" |
|
||||
CLIENT_START=0 |
|
||||
CLIENT_FINISH=1 |
|
||||
CLIENT_NUMBER=${CLIENT_START} |
|
||||
|
|
||||
SERVER_HOST_NAME="localhost.localdomain" |
|
||||
SERVER_LOCAL_HOST_NAME="localhost" |
|
||||
SERVER_PUBLIC_HOST_NAMES="-" |
|
||||
|
|
||||
readonly CF_COMMANDS=" |
|
||||
cfssl |
|
||||
cfssljson |
|
||||
" |
|
||||
|
|
||||
if [ ! -z "$1" ]; then |
|
||||
CA_INTERMEDIATE_START=$1 |
|
||||
CA_INTERMEDIATE_NUMBER=${CA_INTERMEDIATE_START} |
|
||||
fi |
|
||||
|
|
||||
if [ ! -z "$2" ]; then |
|
||||
CA_INTERMEDIATE_FINISH=$2 |
|
||||
fi |
|
||||
|
|
||||
if [ ! -z "$3" ]; then |
|
||||
CLIENT_START=$1 |
|
||||
CLIENT_NUMBER=${CLIENT_START} |
|
||||
fi |
|
||||
|
|
||||
if [ ! -z "$4" ]; then |
|
||||
CLIENT_FINISH=$4 |
|
||||
fi |
|
||||
|
|
||||
# Change working directory |
|
||||
rm -rf ${TRUST_PATH} |
|
||||
mkdir -p ${TRUST_PATH} |
|
||||
rm -rf ${CLIENT_PATH} |
|
||||
mkdir -p ${CLIENT_PATH} |
|
||||
cd -- "$( |
|
||||
dirname "${0}" |
|
||||
)" || exit 1 |
|
||||
|
|
||||
|
|
||||
rm *.csr |
|
||||
rm *.p12 |
|
||||
rm *.json |
|
||||
rm *.pem |
|
||||
rm *.jks |
|
||||
|
|
||||
intermediate_common_name() { |
|
||||
echo "${CA_INTERMEDIATE_CERT_KEY_PREF}${CA_INTERMEDIATE_NUMBER}" |
|
||||
} |
|
||||
|
|
||||
set_list_sert_for_cat() { |
|
||||
local first="$1" |
|
||||
echo "$first ${CA_LIST_CERT_FOR_CAT}" |
|
||||
} |
|
||||
|
|
||||
client_common_name() { |
|
||||
echo "${CLIENT_CERT_KEY_PREF}$(printf "%08d" ${CLIENT_NUMBER})" |
|
||||
} |
|
||||
|
|
||||
client_alias_name() { |
|
||||
echo "${CLIENT_CERT_ALIAS_PREF}$(printf "%08d" ${CLIENT_NUMBER})" |
|
||||
} |
|
||||
|
|
||||
for COMMAND in ${CF_COMMANDS}; do |
|
||||
if ! command -v ${COMMAND} &> /dev/null; then |
|
||||
echo "ERROR: Missing command ${COMMAND}" >&2 |
|
||||
echo "Install the package from: https://pkg.cfssl.org/" >&2 |
|
||||
exit 1 |
|
||||
fi |
|
||||
done |
|
||||
|
|
||||
tee ./${TRUST_PATH}/ca-config.json 1> /dev/null <<-CONFIG |
|
||||
{ |
|
||||
"signing": { |
|
||||
"default": { |
|
||||
"expiry": "8760h", |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
] |
|
||||
}, |
|
||||
"profiles": { |
|
||||
"server": { |
|
||||
"expiry": "43800h", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"signing", |
|
||||
"key encipherment", |
|
||||
"server auth" |
|
||||
] |
|
||||
}, |
|
||||
"client": { |
|
||||
"expiry": "43800h", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"signing", |
|
||||
"key encipherment", |
|
||||
"client auth" |
|
||||
] |
|
||||
}, |
|
||||
"client-server": { |
|
||||
"expiry": "43800h", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"signing", |
|
||||
"key encipherment", |
|
||||
"server auth", |
|
||||
"client auth" |
|
||||
] |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
tee ./${TRUST_PATH}/ca-root-to-intermediate-config.json 1> /dev/null <<-CONFIG |
|
||||
{ |
|
||||
"signing": { |
|
||||
"default": { |
|
||||
"expiry": "43800h", |
|
||||
"ca_constraint": { |
|
||||
"is_ca": true, |
|
||||
"max_path_len": 0, |
|
||||
"max_path_len_zero": true |
|
||||
}, |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"digital signature", |
|
||||
"cert sign", |
|
||||
"crl sign", |
|
||||
"signing" |
|
||||
] |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Generate the root of certificates: \n-${CA_ROOT_KEY}-key.pem (certificate key)\n-${CA_ROOT_KEY}.pem (certificate)\n-${CA_ROOT_KEY}.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
cfssl genkey \ |
|
||||
-initca \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${TRUST_PATH}/${CA_ROOT_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "ROOT CA", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
], |
|
||||
"ca": { |
|
||||
"expiry": "131400h" |
|
||||
} |
|
||||
} |
|
||||
CONFIG |
|
||||
CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}.pem) |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Generate and Signed the intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY_PREF}?-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY_PREF}?.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY_PREF}?.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
|
|
||||
while [[ ${CA_INTERMEDIATE_NUMBER} -lt ${CA_INTERMEDIATE_FINISH} ]]; |
|
||||
do |
|
||||
CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name) |
|
||||
CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1)) |
|
||||
|
|
||||
cfssl gencert \ |
|
||||
-ca ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \ |
|
||||
-ca-key ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \ |
|
||||
-config ./${TRUST_PATH}/ca-root-to-intermediate-config.json \ |
|
||||
-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "${CA_INTERMEDIATE_CERT_KEY}", |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
] |
|
||||
} |
|
||||
CONFIG |
|
||||
#openssl x509 -in ${CA_INTERMEDIATE_CERT_KEY}.pem -text -noout |
|
||||
CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem) |
|
||||
CA_INTERMEDIATE_CERT_SIGN=${CA_INTERMEDIATE_CERT_KEY} |
|
||||
done |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Add the CA_certificate to keystore: ${CA_TRUST_CERT_CHAIN_JKS}.jks" |
|
||||
echo "====================================================" |
|
||||
cat ${CA_LIST_CERT_FOR_CAT} > ./${TRUST_PATH}/${CA_TRUST_STORE_ALL_CHAIN}.pem |
|
||||
openssl pkcs12 -export -in ./${TRUST_PATH}/${CA_TRUST_STORE_ALL_CHAIN}.pem -inkey ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem -out ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.p12 -name ${CA_TRUST_STORE_CHAIN_ALIAS} -CAfile ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${CA_TRUST_STORE_PWD} -passout pass:${CA_TRUST_STORE_PWD} |
|
||||
keytool -importkeystore -deststorepass ${CA_TRUST_STORE_PWD} -destkeypass ${CA_TRUST_STORE_PWD} -destkeystore ./${TRUST_PATH}/${CA_TRUST_CERT_CHAIN_JKS}.jks -srckeystore ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${CA_TRUST_STORE_PWD} -alias ${CA_TRUST_STORE_CHAIN_ALIAS} |
|
||||
|
|
||||
keytool -list -v -keystore ./${TRUST_PATH}/lwm2mtruststorechain.jks -storepass server_ks_password -storetype PKCS12 |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Generate and Signed the clients of our certificates: \n-${CLIENT_CERT_KEY_PREF}?-key.pem (certificate key)\n-${CLIENT_CERT_KEY_PREF}?.pem (certificate)\n-${CCLIENT_CERT_KEY_PREF}?.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
|
|
||||
|
|
||||
while [[ ${CLIENT_NUMBER} -lt ${CLIENT_FINISH} ]]; |
|
||||
do |
|
||||
CLIENT_CERT_KEY=$(client_common_name) |
|
||||
CLIENT_CERT_ALIAS=$(client_alias_name) |
|
||||
CLIENT_NUMBER=$((${CLIENT_NUMBER} + 1)) |
|
||||
|
|
||||
cfssl gencert \ |
|
||||
-ca ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \ |
|
||||
-ca-key ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \ |
|
||||
-config ./${TRUST_PATH}/ca-config.json \ |
|
||||
-profile client \ |
|
||||
-hostname "${CLIENT_HOST_NAME}" \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${CLIENT_PATH}/${CLIENT_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "${CLIENT_CERT_KEY}" |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Add the client certificate (${CLIENT_CERT_KEY}.pem) to keystore: ${CLIENT_JKS_FOR_TEST}.jks" |
|
||||
echo "====================================================" |
|
||||
cat ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${CLIENT_PATH}/${CLIENT_CERT_KEY}_chain.pem |
|
||||
openssl pkcs12 -export -in ./${CLIENT_PATH}/${CLIENT_CERT_KEY}_chain.pem -inkey ./${CLIENT_PATH}/${CLIENT_CERT_KEY}-key.pem -out ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.p12 -name ${CLIENT_CERT_ALIAS} -CAfile ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${CLIENT_STORE_PWD} -passout pass:${CLIENT_STORE_PWD} |
|
||||
keytool -importkeystore -deststorepass ${CLIENT_STORE_PWD} -destkeypass ${CLIENT_STORE_PWD} -destkeystore ./${CLIENT_PATH}/${CLIENT_JKS_FOR_TEST}.jks -srckeystore ./${CLIENT_PATH}/${CLIENT_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${CLIENT_STORE_PWD} -alias ${CLIENT_CERT_ALIAS} |
|
||||
|
|
||||
done |
|
||||
|
|
||||
keytool -list -v -keystore ./${CLIENT_PATH}/lwm2mclient.jks -storepass client_ks_password -storetype PKCS12 |
|
||||
|
|
||||
rm ./${TRUST_PATH}/*.p12 |
|
||||
rm ./${TRUST_PATH}/*.csr |
|
||||
rm ./${TRUST_PATH}/*.json |
|
||||
rm ./${TRUST_PATH}/${CA_ROOT_CERT_KEY}* |
|
||||
rm ./${TRUST_PATH}/${CA_INTERMEDIATE_CERT_KEY_PREF}* |
|
||||
|
|
||||
|
|
||||
rm ./${CLIENT_PATH}/*.p12 2> /dev/null |
|
||||
rm ./${CLIENT_PATH}/*.csr 2> /dev/null |
|
||||
@ -1,65 +0,0 @@ |
|||||
#!/usr/bin/env bash |
|
||||
|
|
||||
readonly INTERMEDIATE_START=0 |
|
||||
readonly INTERMEDIATE_FINISH=2 |
|
||||
readonly CLIENT_START=0 |
|
||||
readonly CLIENT_FINISH=5 |
|
||||
|
|
||||
IS_IHFO=false |
|
||||
IS_SERVER_CREATED_KEY=true |
|
||||
IS_TRUST_CLIENT_CREATED_KEY=true |
|
||||
|
|
||||
cd -- "$( |
|
||||
dirname "${0}" |
|
||||
)" || exit 1 |
|
||||
|
|
||||
Help() |
|
||||
{ |
|
||||
# Display Help |
|
||||
echo "Description of the script functions." |
|
||||
echo |
|
||||
echo "Syntax: scriptTemplate [-g|h|v|V]" |
|
||||
echo "options:" |
|
||||
echo "h Print this Help." |
|
||||
echo "v Verbose mode." |
|
||||
echo "V Print software version and exit." |
|
||||
echo |
|
||||
} |
|
||||
|
|
||||
if [ "$1" == "-h" ] ; then |
|
||||
echo -e "Usage 2: ./`basename $0` \"Information is not displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are generated\"" |
|
||||
echo -e "Usage 1: ./`basename $0` true \"Information is displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are generated\"" |
|
||||
echo -e "Usage 3: ./`basename $0` true false \"Information is displayed\" : \"Keys for the server are not generated\" : \"Keys for the clients and trusts are generated\"" |
|
||||
echo -e "Usage 4: ./`basename $0` true false false \"Information is displayed\" : \"Keys for the server are not generated\" : \"Keys for the clients and trusts are not generated\"" |
|
||||
echo -e "Usage 4: ./`basename $0` true true false \"Information is displayed\" : \"Keys for the server are generated\" : \"Keys for the clients and trusts are not generated\"" |
|
||||
echo "This Help File: ./`basename $0` -h" |
|
||||
exit 0 |
|
||||
fi |
|
||||
|
|
||||
if [ -n "$1" ]; then |
|
||||
IS_IHFO=$1 |
|
||||
fi |
|
||||
|
|
||||
if [ -n "$2" ]; then |
|
||||
IS_SERVER_CREATED_KEY=$2 |
|
||||
fi |
|
||||
|
|
||||
if [ -n "$3" ]; then |
|
||||
IS_TRUST_CLIENT_CREATED_KEY=$3 |
|
||||
fi |
|
||||
|
|
||||
if [ "$IS_IHFO" = false ] ; then |
|
||||
if [ "$IS_SERVER_CREATED_KEY" = true ] ; then |
|
||||
./lwm2m_cfssl_chain_server_for_test.sh > /dev/null 2>&1 & |
|
||||
fi |
|
||||
if [ "$IS_TRUST_CLIENT_CREATED_KEY" = true ] ; then |
|
||||
./lwM2M_cfssl_chain_trusts_and_clients_for_test.sh ${INTERMEDIATE_START} ${INTERMEDIATE_FINISH} ${CLIENT_START} ${CLIENT_FINISH} > /dev/null 2>&1 & |
|
||||
fi |
|
||||
else |
|
||||
if [ "$IS_SERVER_CREATED_KEY" = true ] ; then |
|
||||
./lwm2m_cfssl_chain_server_for_test.sh |
|
||||
fi |
|
||||
if [ "$IS_TRUST_CLIENT_CREATED_KEY" = true ] ; then |
|
||||
./lwM2M_cfssl_chain_trusts_and_clients_for_test.sh ${INTERMEDIATE_START} ${INTERMEDIATE_FINISH} ${CLIENT_START} ${CLIENT_FINISH} |
|
||||
fi |
|
||||
fi |
|
||||
@ -1,298 +0,0 @@ |
|||||
#!/usr/bin/env bash |
|
||||
|
|
||||
# REF: https://github.com/cloudflare/cfssl |
|
||||
|
|
||||
# Change working directory |
|
||||
cd -- "$( |
|
||||
dirname "${0}" |
|
||||
)" || exit 1 |
|
||||
|
|
||||
readonly CA_ROOT_CERT_KEY="ca-root" |
|
||||
readonly CA_ROOT_ALIAS="root" |
|
||||
readonly CA_INTERMEDIATE_CERT_KEY_PREF="intermediate_ca" |
|
||||
CA_INTERMEDIATE_NUMBER=0 |
|
||||
CA_LIST_CERT_FOR_CAT="" |
|
||||
|
|
||||
readonly CF_COMMANDS=" |
|
||||
cfssl |
|
||||
cfssljson |
|
||||
" |
|
||||
|
|
||||
readonly SERVER_JKS_FOR_TEST="lwm2mserver" |
|
||||
readonly STORE_PASS_PWD="server_ks_password" |
|
||||
readonly SERVER_PATH="Server" |
|
||||
readonly SERVER_CERT_KEY="lwm2mserver" |
|
||||
readonly SERVER_CERT_CHAIN="lwm2mserver_chain" |
|
||||
readonly SERVER_CERT_ALIAS="server" |
|
||||
readonly BS_SERVER_CERT_KEY="lwm2mserverbs" |
|
||||
readonly BS_SERVER_CERT_CHAIN="lwm2mserverbs_chain" |
|
||||
readonly BS_SERVER_CERT_ALIAS="bootstrap" |
|
||||
|
|
||||
SERVER_HOST_NAME="localhost.localdomain" |
|
||||
SERVER_LOCAL_HOST_NAME="localhost" |
|
||||
SERVER_PUBLIC_HOST_NAMES="-" |
|
||||
|
|
||||
intermediate_common_name() { |
|
||||
echo "${CA_INTERMEDIATE_CERT_KEY_PREF}${CA_INTERMEDIATE_NUMBER}" |
|
||||
} |
|
||||
|
|
||||
set_list_sert_for_cat() { |
|
||||
local first="$1" |
|
||||
echo "$first ${CA_LIST_CERT_FOR_CAT}" |
|
||||
} |
|
||||
|
|
||||
|
|
||||
# Change working directory |
|
||||
rm -rf ${SERVER_PATH} |
|
||||
mkdir -p ${SERVER_PATH} |
|
||||
|
|
||||
cd -- "$( |
|
||||
dirname ./${SERVER_PATH} |
|
||||
)" || exit 1 |
|
||||
|
|
||||
|
|
||||
rm *.csr |
|
||||
rm *.p12 |
|
||||
rm *.json |
|
||||
rm *.pem |
|
||||
rm *.jks |
|
||||
|
|
||||
CA_INTERMEDIATE_CERT_SIGN=${CA_ROOT_CERT_KEY} |
|
||||
CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name) |
|
||||
CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1)) |
|
||||
CA_LIST_CERT_FOR_CAT="" |
|
||||
|
|
||||
for COMMAND in ${CF_COMMANDS}; do |
|
||||
if ! command -v ${COMMAND} &> /dev/null; then |
|
||||
echo "ERROR: Missing command ${COMMAND}" >&2 |
|
||||
echo "Install the package from: https://pkg.cfssl.org/" >&2 |
|
||||
exit 1 |
|
||||
fi |
|
||||
done |
|
||||
|
|
||||
tee ./${SERVER_PATH}/ca-config.json 1> /dev/null <<-CONFIG |
|
||||
{ |
|
||||
"signing": { |
|
||||
"default": { |
|
||||
"expiry": "8760h", |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
] |
|
||||
}, |
|
||||
"profiles": { |
|
||||
"server": { |
|
||||
"expiry": "43800h", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"signing", |
|
||||
"key encipherment", |
|
||||
"server auth" |
|
||||
] |
|
||||
}, |
|
||||
"client": { |
|
||||
"expiry": "43800h", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"signing", |
|
||||
"key encipherment", |
|
||||
"client auth" |
|
||||
] |
|
||||
}, |
|
||||
"client-server": { |
|
||||
"expiry": "43800h", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"signing", |
|
||||
"key encipherment", |
|
||||
"server auth", |
|
||||
"client auth" |
|
||||
] |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
tee ./${SERVER_PATH}/ca-root-to-intermediate-config.json 1> /dev/null <<-CONFIG |
|
||||
{ |
|
||||
"signing": { |
|
||||
"default": { |
|
||||
"expiry": "43800h", |
|
||||
"ca_constraint": { |
|
||||
"is_ca": true, |
|
||||
"max_path_len": 0, |
|
||||
"max_path_len_zero": true |
|
||||
}, |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"usages": [ |
|
||||
"digital signature", |
|
||||
"cert sign", |
|
||||
"crl sign", |
|
||||
"signing" |
|
||||
] |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Generate the root of certificates: \n-${CA_ROOT_KEY}-key.pem (certificate key)\n-${CA_ROOT_KEY}.pem (certificate)\n-${CA_ROOT_KEY}.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
cfssl genkey \ |
|
||||
-initca \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_ROOT_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "ROOT CA for servers", |
|
||||
"key": { |
|
||||
"algo": "ecdsa", |
|
||||
"size": 256 |
|
||||
}, |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
], |
|
||||
"ca": { |
|
||||
"expiry": "131400h" |
|
||||
} |
|
||||
} |
|
||||
CONFIG |
|
||||
CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}.pem) |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Generate and Signed the first intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY}-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY}.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY}.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
cfssl gencert \ |
|
||||
-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \ |
|
||||
-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \ |
|
||||
-config ./${SERVER_PATH}/ca-root-to-intermediate-config.json \ |
|
||||
-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "${CA_INTERMEDIATE_CERT_KEY}", |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
] |
|
||||
} |
|
||||
CONFIG |
|
||||
CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem) |
|
||||
|
|
||||
|
|
||||
## Lwm2m Server certificate |
|
||||
echo "====================================================" |
|
||||
echo -e "Generate and Signed the server certificate: \n-${SERVER_CERT_KEY}-key.pem (certificate key)\n-${SERVER_CERT_KEY}.pem (certificate)\n-${SERVER_CERT_KEY}.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
cfssl gencert \ |
|
||||
-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \ |
|
||||
-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \ |
|
||||
-config ./${SERVER_PATH}/ca-config.json \ |
|
||||
-profile server \ |
|
||||
-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${SERVER_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "${SERVER_LOCAL_HOST_NAME}" |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Add the server certificate (${SERVER_CERT_KEY}.pem) to keystore: ${SERVER_JKS_FOR_TEST}.jks" |
|
||||
echo "====================================================" |
|
||||
cat ./${SERVER_PATH}/${SERVER_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${SERVER_PATH}/${SERVER_CERT_CHAIN}.pem |
|
||||
openssl pkcs12 -export -in ./${SERVER_PATH}/${SERVER_CERT_CHAIN}.pem -inkey ./${SERVER_PATH}/${SERVER_CERT_KEY}-key.pem -out ./${SERVER_PATH}/${SERVER_CERT_KEY}.p12 -name ${SERVER_CERT_ALIAS} -CAfile ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${STORE_PASS_PWD} -passout pass:${STORE_PASS_PWD} |
|
||||
keytool -importkeystore -deststorepass ${STORE_PASS_PWD} -destkeypass ${STORE_PASS_PWD} -destkeystore ./${SERVER_PATH}/${SERVER_JKS_FOR_TEST}.jks -srckeystore ./${SERVER_PATH}/${SERVER_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${STORE_PASS_PWD} -alias ${SERVER_CERT_ALIAS} |
|
||||
|
|
||||
|
|
||||
CA_INTERMEDIATE_CERT_SIGN=${CA_INTERMEDIATE_CERT_KEY} |
|
||||
CA_INTERMEDIATE_CERT_KEY=$(intermediate_common_name) |
|
||||
CA_INTERMEDIATE_NUMBER=$((${CA_INTERMEDIATE_NUMBER} + 1)) |
|
||||
echo "====================================================" |
|
||||
echo -e "Generate and Signed the second intermediates of our certificates: \n-${CA_INTERMEDIATE_CERT_KEY}-key.pem (certificate key)\n-${CA_INTERMEDIATE_CERT_KEY}.pem (certificate)\n-${CA_INTERMEDIATE_CERT_KEY}.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
cfssl gencert \ |
|
||||
-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}.pem \ |
|
||||
-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_SIGN}-key.pem \ |
|
||||
-config ./${SERVER_PATH}/ca-root-to-intermediate-config.json \ |
|
||||
-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "${CA_INTERMEDIATE_CERT_KEY}", |
|
||||
"names": [ |
|
||||
{ |
|
||||
"C": "UK", |
|
||||
"ST": "Kyiv city", |
|
||||
"L": "Kyiv", |
|
||||
"O": "Thingsboard", |
|
||||
"OU": "DEVELOPER_TEST" |
|
||||
} |
|
||||
] |
|
||||
} |
|
||||
CONFIG |
|
||||
CA_LIST_CERT_FOR_CAT=$(set_list_sert_for_cat ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem) |
|
||||
|
|
||||
## Bootstrap server certificate |
|
||||
echo "====================================================" |
|
||||
echo -e "Generate and Signed the server certificate: \n-${BS_SERVER_CERT_KEY}-key.pem (certificate key)\n-${BS_SERVER_CERT_KEY}.pem (certificate)\n-${BS_SERVER_CERT_KEY}.csr (sign request)" |
|
||||
echo "====================================================" |
|
||||
cfssl gencert \ |
|
||||
-ca ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem \ |
|
||||
-ca-key ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}-key.pem \ |
|
||||
-config ./${SERVER_PATH}/ca-config.json \ |
|
||||
-profile server \ |
|
||||
-hostname "${SERVER_HOST_NAME},${SERVER_LOCAL_HOST_NAME}${SERVER_PUBLIC_HOST_NAMES:+, }${SERVER_PUBLIC_HOST_NAMES}" \ |
|
||||
- \ |
|
||||
<<-CONFIG | cfssljson -bare ./${SERVER_PATH}/${BS_SERVER_CERT_KEY} |
|
||||
{ |
|
||||
"CN": "${SERVER_LOCAL_HOST_NAME}" |
|
||||
} |
|
||||
CONFIG |
|
||||
|
|
||||
echo "====================================================" |
|
||||
echo -e "Add the Bootstrap server certificate (${BS_SERVER_CERT_KEY}.pem) to keystore: ${SERVER_JKS_FOR_TEST}.jks" |
|
||||
echo "====================================================" |
|
||||
cat ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.pem ${CA_LIST_CERT_FOR_CAT} > ./${SERVER_PATH}/${BS_SERVER_CERT_CHAIN}.pem |
|
||||
openssl pkcs12 -export -in ./${SERVER_PATH}/${BS_SERVER_CERT_CHAIN}.pem -inkey ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}-key.pem -out ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.p12 -name ${BS_SERVER_CERT_ALIAS} -CAfile ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY}.pem -caname ${CA_ROOT_ALIAS} -passin pass:${STORE_PASS_PWD} -passout pass:${STORE_PASS_PWD} |
|
||||
keytool -importkeystore -deststorepass ${STORE_PASS_PWD} -destkeypass ${STORE_PASS_PWD} -destkeystore ./${SERVER_PATH}/${SERVER_JKS_FOR_TEST}.jks -srckeystore ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}.p12 -srcstoretype PKCS12 -srcstorepass ${STORE_PASS_PWD} -alias ${BS_SERVER_CERT_ALIAS} |
|
||||
|
|
||||
|
|
||||
keytool -list -v -keystore ./${SERVER_PATH}/lwm2mserver.jks -storepass server_ks_password -storetype PKCS12 |
|
||||
|
|
||||
rm ./${SERVER_PATH}/*.p12 2> /dev/null |
|
||||
rm ./${SERVER_PATH}/*.csr 2> /dev/null |
|
||||
rm ./${SERVER_PATH}/*.json 2> /dev/null |
|
||||
rm ./${SERVER_PATH}/${CA_INTERMEDIATE_CERT_KEY_PREF}* 2> /dev/null |
|
||||
rm ./${SERVER_PATH}/${CA_ROOT_CERT_KEY}* 2> /dev/null |
|
||||
mv ./${SERVER_PATH}/${SERVER_CERT_KEY}-key.pem ./${SERVER_PATH}/${SERVER_CERT_KEY}_key.pem |
|
||||
mv ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}-key.pem ./${SERVER_PATH}/${BS_SERVER_CERT_KEY}_key.pem |
|
||||
|
|
||||
Loading…
Reference in new issue