Переглянути джерело

HUE-9246 [core] Enable SAML certificate creation with passphrase support. (#1096)

Co-authored-by: Romain Rigaux <romain.rigaux@gmail.com>
Prakash Ranade 5 роки тому
батько
коміт
e8c45bf095
1 змінених файлів з 10 додано та 4 видалено
  1. 10 4
      tools/container/hue/hue.sh

+ 10 - 4
tools/container/hue/hue.sh

@@ -50,10 +50,16 @@ function set_samlcert() {
   mkdir -pm 755 $HUE_CONF_DIR/samlcert
   cd $HUE_CONF_DIR/samlcert
   export RANDFILE=$HUE_CONF_DIR/samlcert/.rnd
-  openssl genrsa -des3 -passout pass:x -out server.pass.key 2048
-  openssl rsa -inform PEM -outform PEM -passin pass:x -in server.pass.key -out server.key
-  openssl req -new -key server.key -out server.csr -subj "/C=US/ST=California/L=Palo Alto/O=Cloudera/OU=Hue/CN=$EXTERNAL_HOST"
-  openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
+  if [ -z ${PASSPHRASE+x} ]; then
+    openssl genrsa -des3 -passout pass:cloudera -out server.pass.key 2048
+    openssl rsa -inform PEM -outform PEM -passin pass:cloudera -in server.pass.key -out server.key
+    openssl req -new -key server.key -out server.csr -subj "/C=US/ST=California/L=Palo Alto/O=Cloudera/OU=Hue/CN=$EXTERNAL_HOST"
+    openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
+  else
+    openssl genrsa -des3 -passout pass:$PASSPHRASE -out server.key 2048
+    openssl req -new -key server.key -out server.csr -passin pass:$PASSPHRASE -subj "/C=US/ST=California/L=Palo Alto/O=Cloudera/OU=Hue/CN=$EXTERNAL_HOST"
+    openssl x509 -req -days 365 -in server.csr -passin pass:$PASSPHRASE -signkey server.key -out server.crt
+  fi
   export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/lib64
 }