mirror of
https://github.com/laurivosandi/certidude
synced 2024-11-10 15:10:35 +00:00
Lauri Võsandi
ce93fbb58b
* Improved offline install docs * Migrated token mechanism backend to SQL * Preliminary token mechanism frontend integration * Add clock skew tolerance for OCSP * Add 'ldap computer filter' support for Kerberized machine enroll * Include OCSP and CRL URL-s in certificates, controlled by profile.conf * Better certificate extension handling * Place DH parameters file in /etc/ssl/dhparam.pem * Always talk to CA over port 8443 for 'certidude enroll' * Hardened frontend nginx config * Separate log files for frontend nginx * Better provisioning heuristics * Add sample site.sh config for LEDE image builder * Add more device profiles for LEDE image builder * Various bugfixes and improvements
12 lines
597 B
Bash
12 lines
597 B
Bash
# Use short hostname as common name
|
|
test -e /sbin/uci && NAME=$(uci get system.@system[0].hostname)
|
|
test -e /bin/hostname && NAME=$(hostname)
|
|
test -n "$NAME" || NAME=$(cat /proc/sys/kernel/hostname)
|
|
|
|
{% include "snippets/request-common.sh" %}
|
|
# Submit CSR and save signed certificate
|
|
curl --cert-status -f -L -H "Content-type: application/pkcs10" \
|
|
--data-binary @/etc/certidude/authority/{{ session.authority.hostname }}/host_req.pem \
|
|
-o /etc/certidude/authority/{{ session.authority.hostname }}/host_cert.pem \
|
|
'http://{{ session.authority.hostname }}/api/request/?wait=yes&autosign=yes'
|