Return to request_ssl_key.sh CVS log

Up to [LON-CAPA] / loncom

Annotation of loncom/request_ssl_key.sh, revision 1.2

1.1       albertel    1: #!/bin/bash
                      2: 
                      3: MAILADDR=certificate@lon-capa.org	# Email the cert request here.
                      4: DESTDIR=/home/httpd/lonCerts			# Destination for the key file.
                      5: DESTUID=www			# Who will own the private key.
1.2     ! raeburn     6: DESTGROUP=www			# Group that will own the private key.
        !             7: 
        !             8: if [ $(whoami) != "$DESTUID" ] && [ $(whoami) != "root" ]; then
        !             9:     echo "This script needs to be run either as $DESTUID or root"
        !            10:     exit
        !            11: fi
        !            12: 
        !            13: if [ $(whoami) != "root" ] ; then
        !            14:     if [ -d "$DESTDIR" ] ; then
        !            15:         CURROWNER=`stat -c %U $DESTDIR`
        !            16:         if [ -L "$DESTDIR" ] ; then
        !            17:             echo "$DESTDIR is a symbolic link. You need to remove the link and (as root) create $DESTDIR as a directory owned by $DESTUID:$DESTGROUP."
        !            18:             exit
        !            19:         elif [ $CURROWNER != $DESTUID ] ; then
        !            20:             echo "$DESTUID is not the owner of $DESTDIR. As root you need to change ownership of this directory to $DESTUID:$DESTGROUP."
        !            21:             exit
        !            22:         fi
        !            23:     else
        !            24:         echo "You need to create a directory: $DESTDIR (as root) and then change ownership of this directory so it is owned by $DESTUID:$DESTGROUP."
        !            25:         exit
        !            26:     fi
        !            27: fi
1.1       albertel   28: 
                     29: openssl req -newkey rsa:1024 -passout pass:loncapa \
                     30:     -keyout lonKey.enc -keyform PEM  \
                     31:     -out    CertRequest.pem -outform PEM
                     32: 
                     33: openssl rsa -passin pass:loncapa -in lonKey.enc -out lonKey.pem
                     34: 
1.2     ! raeburn    35: if [ $(pwd) != "$DESTDIR" ] ; then
        !            36:     if [ !-d "$DESTDIR" ] ; then
        !            37:         install -d -m 0750 -o $DESTUID -g $DESTGROUP $DESTDIR
        !            38:     fi
        !            39:     install -m 0400 -o $DESTUID -g $DESTGROUP lonKey.pem $DESTDIR
        !            40:     rm lonKey.pem
        !            41: else
        !            42:     chmod 0400 lonKey.pem
        !            43: fi
        !            44: 
        !            45: rm lonKey.enc
        !            46: 
1.1       albertel   47: 
                     48: mail <CertRequest.pem -s "Certificate Request" $MAILADDR
                     49: rm CertRequest.pem

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at root@localhost to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log.