Christian Heimes
80be181629
csrgen broke packaging of ipaclient for PyPI. All csrgen related resources are now package data of ipaclient package. Package data is accessed with Jinja's PackageLoader() or through pkg_resources. https://pagure.io/freeipa/issue/6714 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Ben Lipton <blipton@redhat.com> Reviewed-By: Martin Basti <mbasti@redhat.com>
36 lines
778 B
Cheetah
36 lines
778 B
Cheetah
{% raw -%}
|
|
{% import "openssl_macros.tmpl" as openssl -%}
|
|
{%- endraw %}
|
|
#!/bin/bash -e
|
|
|
|
if [[ $# -lt 2 ]]; then
|
|
echo "Usage: $0 <outfile> <keyfile> <other openssl arguments>"
|
|
echo "Called as: $0 $@"
|
|
exit 1
|
|
fi
|
|
|
|
CONFIG="$(mktemp)"
|
|
CSR="$1"
|
|
KEYFILE="$2"
|
|
shift; shift
|
|
|
|
echo \
|
|
{% raw %}{% filter quote %}{% endraw -%}
|
|
[ req ]
|
|
prompt = no
|
|
encrypt_key = no
|
|
|
|
{{ parameters|join('\n') }}
|
|
{% raw %}{% set rendered_extensions -%}{% endraw %}
|
|
{{ extensions|join('\n') }}
|
|
{% raw -%}
|
|
{%- endset -%}
|
|
{% if rendered_extensions -%}
|
|
req_extensions = {% call openssl.section() %}{{ rendered_extensions }}{% endcall %}
|
|
{% endif %}
|
|
{{ openssl.openssl_sections|join('\n\n') }}
|
|
{% endfilter %}{%- endraw %} > "$CONFIG"
|
|
|
|
openssl req -new -config "$CONFIG" -out "$CSR" -key "$KEYFILE" "$@"
|
|
rm "$CONFIG"
|