OLD | NEW |
---|---|
1 #!/bin/bash | 1 #!/bin/bash |
2 | 2 |
3 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved. | 3 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved. |
4 # Use of this source code is governed by a BSD-style license that can be | 4 # Use of this source code is governed by a BSD-style license that can be |
5 # found in the LICENSE file. | 5 # found in the LICENSE file. |
6 | 6 |
7 echo "Adding mock Google Accounts server certs." | 7 echo "Adding mock Google Accounts server certs." |
8 | 8 |
9 CERT_NAME="mock_server" | 9 CERT_NAME="mock_server" |
10 FAKE_CA_DIR="${ROOT_FS_DIR}/etc/fake_root_ca" | 10 FAKE_CA_DIR="${ROOT_FS_DIR}/etc/fake_root_ca" |
11 FAKE_NSSDB="${FAKE_CA_DIR}/nssdb" | 11 FAKE_NSSDB="${FAKE_CA_DIR}/nssdb" |
12 TMP_KEY=$(mktemp -p /tmp "${CERT_NAME}.key.XXXXX") | 12 TMP_KEY=$(mktemp -p /tmp "${CERT_NAME}.key.XXXXX") |
13 TMP_CERT=$(mktemp -p /tmp "${CERT_NAME}.pem.XXXXX") | 13 TMP_CERT=$(mktemp -p /tmp "${CERT_NAME}.pem.XXXXX") |
14 | 14 |
15 # Generate testing root cert on the fly. | 15 # Generate testing root cert on the fly. |
16 openssl req -x509 -nodes -days 365 \ | 16 openssl req -x509 -days 2 -subj "/CN=www.google.com" \ |
17 -subj "/CN=*.google.com" \ | 17 -newkey rsa:1024 -nodes -keyout "${TMP_KEY}" -out "${TMP_CERT}" |
18 -newkey rsa:1024 -keyout "${TMP_KEY}" -out "${TMP_CERT}" | |
19 | 18 |
20 mkdir -m 0755 -p "${FAKE_NSSDB}" | 19 mkdir -m 0755 -p "${FAKE_NSSDB}" |
20 nsscertutil -d sql:"${FAKE_NSSDB}" -N -f <(echo "") | |
21 cp "${TMP_KEY}" "${FAKE_CA_DIR}/${CERT_NAME}.key" | 21 cp "${TMP_KEY}" "${FAKE_CA_DIR}/${CERT_NAME}.key" |
22 cp "${TMP_CERT}" "${FAKE_CA_DIR}/${CERT_NAME}.pem" | |
22 echo "DO NOT MOVE THIS DATA OFF OF THE ROOTFS!" > "${FAKE_CA_DIR}/README" | 23 echo "DO NOT MOVE THIS DATA OFF OF THE ROOTFS!" > "${FAKE_CA_DIR}/README" |
23 nsscertutil -A -n FakeCA -t "C,C,C" -a -i "${TMP_CERT}" -d "${FAKE_NSSDB}" | 24 nsscertutil -d sql:"${FAKE_NSSDB}" -A -n FakeCert -t "C,," -a -i "${TMP_CERT}" |
24 chmod 0644 "${FAKE_NSSDB}"/* | 25 chmod 0644 "${FAKE_NSSDB}"/* |
25 cp "${TMP_CERT}" "${FAKE_CA_DIR}/${CERT_NAME}.pem" | |
26 | 26 |
27 # TODO(cmasone): get rid of this once we're off pam_google for good. | 27 # TODO(cmasone): get rid of this once we're off pam_google for good. |
28 # Sadly, our fake cert HAS to be first in this file. | 28 # Sadly, our fake cert HAS to be first in this file. |
29 TMPFILE=$(mktemp) | 29 TMPFILE=$(mktemp) |
30 CERT_FILE="${ROOT_FS_DIR}/etc/login_trust_root.pem" | 30 CERT_FILE="${ROOT_FS_DIR}/etc/login_trust_root.pem" |
31 PERMS=$(stat --printf="%a" "${CERT_FILE}") | 31 PERMS=$(stat --printf="%a" "${CERT_FILE}") |
32 cat "${TMP_CERT}" "${CERT_FILE}" > "${TMPFILE}" | 32 cat "${TMP_CERT}" "${CERT_FILE}" > "${TMPFILE}" |
33 mv -f "${TMPFILE}" "${CERT_FILE}" | 33 mv -f "${TMPFILE}" "${CERT_FILE}" |
34 chmod "${PERMS}" "${CERT_FILE}" | 34 chmod "${PERMS}" "${CERT_FILE}" |
35 | |
sosa
2010/04/30 16:05:51
SO many extra lines!
| |
36 | |
37 | |
OLD | NEW |