diff options
| author |  Christian Hesse <mail@eworm.de> | 2020-03-20 08:49:09 +0100 |
|---|---|---|
| committer | Christian Hesse <mail@eworm.de> | 2020-03-20 09:26:12 +0100 |
| commit | 739884ecc71ddce1c10f546ed1cd4348298513fb (patch) | |
| tree | 64e9f5a3ddfe65a4a9f1265af58e7a90674e4257 | |
| parent | f50e416e49a9f390408268a5c173b4e99ec81c0f (diff) | |
certificate-renew-issued: support auto-export with given passphrases
| -rw-r--r-- | certificate-renew-issued | 10 | ||||
| -rw-r--r-- | global-config | 4 |
2 files changed, 14 insertions, 0 deletions
diff --git a/certificate-renew-issued b/certificate-renew-issued index 3dc50d3..32da774 100644 --- a/certificate-renew-issued +++ b/certificate-renew-issued @@ -4,6 +4,10 @@ # # renew locally issued certificates +:global CertIssuedExportPass; + +:global MkDir; + :foreach Cert in=[ / certificate find where issued expires-after<3w ] do={ :local CertVal [ / certificate get $Cert ]; / certificate issued-revoke $Cert; @@ -11,4 +15,10 @@ / certificate add name=($CertVal->"name") common-name=($CertVal->"common-name") \ key-usage=($CertVal->"key-usage") subject-alt-name=($CertVal->"subject-alt-name"); / certificate sign ($CertVal->"name") ca=($CertVal->"ca"); + :if ([ :typeof ($CertIssuedExportPass->($CertVal->"common-name")) ] = "str") do={ + $MkDir "cert-issued"; + / certificate export-certificate ($CertVal->"name") type=pkcs12 \ + file-name=("cert-issued/" . $CertVal->"common-name") \ + export-passphrase=($CertIssuedExportPass->($CertVal->"common-name")); + } } diff --git a/global-config b/global-config index 22fbf87..46c07b8 100644 --- a/global-config +++ b/global-config @@ -123,3 +123,7 @@ "v3ry-s3cr3t"; "4n0th3r-s3cr3t"; } +:global CertIssuedExportPass { + "cert1-cn"="v3ry-s3cr3t"; + "cert2-cn"="4n0th3r-s3cr3t"; +} |