فهرست منبع

HUE-9246 [core] Enable SAML certificate creation with passphrase support. (#1096) (#1098)

(cherry picked from commit 8770c5be6dab9cce1b50a7e0773174d1db40ba5b)
Prakash Ranade 5 سال پیش
والد
کامیت
3f126a1d94
1فایلهای تغییر یافته به همراه11 افزوده شده و 4 حذف شده
  1. 11 4
      tools/container/hue/hue.sh

+ 11 - 4
tools/container/hue/hue.sh

@@ -50,10 +50,17 @@ function set_samlcert() {
   mkdir -pm 755 $HUE_CONF_DIR/samlcert
   cd $HUE_CONF_DIR/samlcert
   export RANDFILE=$HUE_CONF_DIR/samlcert/.rnd
-  openssl genrsa -des3 -passout pass:x -out server.pass.key 2048
-  openssl rsa -inform PEM -outform PEM -passin pass:x -in server.pass.key -out server.key
-  openssl req -new -key server.key -out server.csr -subj "/C=US/ST=California/L=Palo Alto/O=Cloudera/OU=Hue/CN=$EXTERNAL_HOST"
-  openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
+  if [ -z ${PASSPHRASE+x} ]; then
+    openssl genrsa -des3 -passout pass:cloudera -out server.pass.key 2048
+    openssl rsa -inform PEM -outform PEM -passin pass:cloudera -in server.pass.key -out server.key
+    openssl req -new -key server.key -out server.csr -subj "/C=US/ST=California/L=Palo Alto/O=Cloudera/OU=Hue/CN=$EXTERNAL_HOST"
+    openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
+  else
+    echo "echo \$PASSPHRASE" > $HUE_CONF_DIR/samlcert/pass.key
+    openssl genrsa -des3 -passout pass:$PASSPHRASE -out server.key 2048
+    openssl req -new -key server.key -out server.csr -passin pass:$PASSPHRASE -subj "/C=US/ST=California/L=Palo Alto/O=Cloudera/OU=Hue/CN=$EXTERNAL_HOST"
+    openssl x509 -req -days 365 -in server.csr -passin pass:$PASSPHRASE -signkey server.key -out server.crt
+  fi
   export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/lib64
 }