|
|
|
@ -34,17 +34,24 @@ function generate_password () {
|
|
|
|
|
|
|
|
|
|
# Initialize a CA if not already initialized
|
|
|
|
|
function step_ca_init () {
|
|
|
|
|
DOCKER_STEPCA_INIT_PROVISIONER_NAME="${DOCKER_STEPCA_INIT_PROVISIONER_NAME:-admin}"
|
|
|
|
|
DOCKER_STEPCA_INIT_ADMIN_SUBJECT="${DOCKER_STEPCA_INIT_ADMIN_SUBJECT:-step}"
|
|
|
|
|
|
|
|
|
|
local -a setup_args=(
|
|
|
|
|
--name "${DOCKER_STEPCA_INIT_NAME}"
|
|
|
|
|
--dns "${DOCKER_STEPCA_INIT_DNS_NAMES}"
|
|
|
|
|
--provisioner "${DOCKER_STEPCA_INIT_PROVISIONER_NAME:-admin}"
|
|
|
|
|
--provisioner "${DOCKER_STEPCA_INIT_PROVISIONER_NAME}"
|
|
|
|
|
--password-file "${STEPPATH}/password"
|
|
|
|
|
--provisioner-password-file "${STEPPATH}/provisioner_password"
|
|
|
|
|
--admin-subject "${DOCKER_STEPCA_INIT_ADMIN_SUBJECT}"
|
|
|
|
|
--address ":9000"
|
|
|
|
|
)
|
|
|
|
|
if [ -n "${DOCKER_STEPCA_INIT_PASSWORD}" ]; then
|
|
|
|
|
echo "${DOCKER_STEPCA_INIT_PASSWORD}" > "${STEPPATH}/password"
|
|
|
|
|
echo "${DOCKER_STEPCA_INIT_PASSWORD}" > "${STEPPATH}/provisioner_password"
|
|
|
|
|
else
|
|
|
|
|
generate_password > "${STEPPATH}/password"
|
|
|
|
|
generate_password > "${STEPPATH}/provisioner_password"
|
|
|
|
|
fi
|
|
|
|
|
if [ -n "${DOCKER_STEPCA_INIT_SSH}" ]; then
|
|
|
|
|
setup_args=("${setup_args[@]}" --ssh)
|
|
|
|
@ -56,6 +63,13 @@ function step_ca_init () {
|
|
|
|
|
setup_args=("${setup_args[@]}" --remote-management)
|
|
|
|
|
fi
|
|
|
|
|
step ca init "${setup_args[@]}"
|
|
|
|
|
echo ""
|
|
|
|
|
if [ -n "${DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT}" ]; then
|
|
|
|
|
echo "👉 Your CA administrative username is: ${DOCKER_STEPCA_INIT_ADMIN_SUBJECT}"
|
|
|
|
|
fi
|
|
|
|
|
echo "👉 Your CA administrative password is: $(< $STEPPATH/provisioner_password )"
|
|
|
|
|
echo "🤫 This will only be displayed once."
|
|
|
|
|
shred -u $STEPPATH/provisioner_password
|
|
|
|
|
mv $STEPPATH/password $PWDPATH
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|