mirror of
https://github.com/laurivosandi/certidude
synced 2024-12-23 08:35:19 +00:00
Lauri Võsandi
5e9251f365
* Subnets configuration option for Kerberos machine enrollment * Configurable script snippets via [service] configuration section * Preliminary revocation reason support * Improved signature profile support * Add domain components to DN to distinguish certificate CN's namespace * Image builder improvements, add Elliptic Curve support * Added GetCACaps operation and more digest algorithms for SCEP * Generate certificate and CRL serial from timestamp (64+32bits) and random bytes (56bits) * Move client storage pool to /etc/certidude/authority/ * Cleanups & bugfixes
11 lines
240 B
Bash
11 lines
240 B
Bash
#!/bin/sh
|
|
|
|
# To test: ACTION=ifup INTERFACE=wan sh /etc/hotplug.d/iface/50-certidude
|
|
|
|
AUTHORITY=certidude.@authority[0]
|
|
|
|
[ $ACTION == "ifup" ] || exit 0
|
|
[ $INTERFACE == "$(uci get $AUTHORITY.trigger)" ] || exit 0
|
|
|
|
/usr/bin/certidude-enroll
|