mirror of
https://github.com/laurivosandi/certidude
synced 2024-09-21 02:08:11 +00:00
59 lines
1.6 KiB
Bash
59 lines
1.6 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
set -e
|
||
|
|
set -x
|
||
|
|
umask 022
|
||
|
|
|
||
|
|
VERSION=17.01.4
|
||
|
|
BASENAME=lede-imagebuilder-$VERSION-ar71xx-generic.Linux-x86_64
|
||
|
|
FILENAME=$BASENAME.tar.xz
|
||
|
|
URL=http://downloads.lede-project.org/releases/$VERSION/targets/ar71xx/generic/$FILENAME
|
||
|
|
|
||
|
|
PACKAGES="luci luci-app-commands \
|
||
|
|
collectd collectd-mod-conntrack collectd-mod-interface \
|
||
|
|
collectd-mod-iwinfo collectd-mod-load collectd-mod-memory \
|
||
|
|
collectd-mod-network collectd-mod-protocols collectd-mod-tcpconns \
|
||
|
|
collectd-mod-uptime \
|
||
|
|
openssl-util openvpn-openssl curl ca-certificates \
|
||
|
|
htop iftop tcpdump nmap nano -odhcp6c -odhcpd -dnsmasq \
|
||
|
|
-luci-app-firewall \
|
||
|
|
-pppd -luci-proto-ppp -kmod-ppp -ppp -ppp-mod-pppoe \
|
||
|
|
-kmod-ip6tables -ip6tables -luci-proto-ipv6 -kmod-iptunnel6 -kmod-ipsec6"
|
||
|
|
|
||
|
|
|
||
|
|
if [ ! -e $FILENAME ]; then
|
||
|
|
wget -q $URL
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ ! -e $BASENAME ]; then
|
||
|
|
tar xf $FILENAME
|
||
|
|
fi
|
||
|
|
|
||
|
|
cd $BASENAME
|
||
|
|
|
||
|
|
# Copy CA certificate
|
||
|
|
AUTHORITY=$(hostname -f)
|
||
|
|
CERTIDUDE_DIR=/var/lib/certidude/$AUTHORITY
|
||
|
|
if [ -d "$CERTIDUDE_DIR" ]; then
|
||
|
|
mkdir -p overlay/$CERTIDUDE_DIR
|
||
|
|
cp $CERTIDUDE_DIR/ca_cert.pem overlay/$CERTIDUDE_DIR
|
||
|
|
fi
|
||
|
|
|
||
|
|
cat < EOF > overlay/etc/config/certidude
|
||
|
|
|
||
|
|
config authority
|
||
|
|
option url http://$AUTHORITY
|
||
|
|
option authority_path /var/lib/certidude/$AUTHORITY/ca_cert.pem
|
||
|
|
option request_path /var/lib/certidude/$AUTHORITY/client_req.pem
|
||
|
|
option certificate_path /var/lib/certidude/$AUTHORITY/client_cert.pem
|
||
|
|
option key_path /var/lib/certidude/$AUTHORITY/client_key.pem
|
||
|
|
option key_type rsa
|
||
|
|
option key_length 1024
|
||
|
|
option red_led gl-connect:red:wlan
|
||
|
|
option green_led gl-connect:green:lan
|
||
|
|
|
||
|
|
EOF
|
||
|
|
|
||
|
|
make image FILES=../overlay/ PACKAGES="$PACKAGES" PROFILE="$PROFILE"
|
||
|
|
|