cfssl-default-env 1.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344
  1. #!/bin/bash
  2. #
  3. # Default CA config
  4. #
  5. CFSSL_DEFAULT_CACERT="${CONTAINER_SERVICE_DIR}/:ssl-tools/assets/default-ca/default-ca.pem"
  6. CFSSL_DEFAULT_CA_KEY="${CONTAINER_SERVICE_DIR}/:ssl-tools/assets/default-ca/default-ca-key.pem"
  7. CFSSL_DEFAULT_CA_CONFIG="${CONTAINER_SERVICE_DIR}/:ssl-tools/assets/default-ca/config/ca-config.json"
  8. CFSSL_DEFAULT_CSR="${CONTAINER_SERVICE_DIR}/:ssl-tools/assets/default-ca/config/req-csr.json.tmpl"
  9. # default csr file params
  10. CFSSL_DEFAULT_CA_CSR_CN=${CFSSL_DEFAULT_CA_CSR_CN:-${HOSTNAME}}
  11. CFSSL_DEFAULT_CA_CSR_KEY_ALGO=${CFSSL_DEFAULT_CA_CSR_KEY_ALGO:-"ecdsa"}
  12. CFSSL_DEFAULT_CA_CSR_KEY_SIZE=${CFSSL_DEFAULT_CA_CSR_KEY_SIZE:-384}
  13. CFSSL_DEFAULT_CA_CSR_ORGANIZATION=${CFSSL_DEFAULT_CA_CSR_ORGANIZATION:-"A1A Car Wash"}
  14. CFSSL_DEFAULT_CA_CSR_ORGANIZATION_UNIT=${CFSSL_DEFAULT_CA_CSR_ORGANIZATION_UNIT:-"Information Technology Dep."}
  15. CFSSL_DEFAULT_CA_CSR_LOCATION=${CFSSL_DEFAULT_CA_CSR_LOCATION:-"Albuquerque"}
  16. CFSSL_DEFAULT_CA_CSR_STATE=${CFSSL_DEFAULT_CA_CSR_STATE:-"New Mexico"}
  17. CFSSL_DEFAULT_CA_CSR_COUNTRY=${CFSSL_DEFAULT_CA_CSR_COUNTRY:-"US"}
  18. #
  19. # General CFSSL config
  20. #
  21. CFSSL_RETRY=${CFSSL_RETRY:-3}
  22. CFSSL_RETRY_DELAY=${CFSSL_RETRY_DELAY:-1}
  23. # remote config
  24. CFSSL_REMOTE=${CFSSL_REMOTE:-}
  25. CFSSL_REMOTE_HTTPS_CA_CERT=${CFSSL_REMOTE_HTTPS_CA_CERT:-}
  26. # local config
  27. CFSSL_CA_CERT=${CFSSL_CA_CERT:-${CFSSL_DEFAULT_CACERT}}
  28. CFSSL_CA_KEY=${CFSSL_CA_KEY:-${CFSSL_DEFAULT_CA_KEY}}
  29. # gencert
  30. CFSSL_CSR=${CFSSL_CSR:-${CFSSL_DEFAULT_CSR}}
  31. CFSSL_CSR_JSON=${CFSSL_CSR_JSON:-}
  32. CFSSL_CONFIG=${CFSSL_CONFIG:-${CFSSL_CA_CONFIG}}
  33. CFSSL_CONFIG_JSON=${CFSSL_CONFIG_JSON:-${CFSSL_CA_CONFIG_JSON}}
  34. CFSSL_HOSTNAME=${CFSSL_HOSTNAME:-${HOSTNAME}}
  35. CFSSL_PROFILE=${CFSSL_PROFILE:-}
  36. CFSSL_LABEL=${CFSSL_LABEL:-}