Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 1 | #!/usr/bin/env bash |
| 2 | |
| 3 | echo "What is the CA Prefix (eg. /example) you want to deploy?" |
| 4 | read CA_PREFIX |
| 5 | echo "" |
| 6 | |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 7 | echo "Do you want to (re) compile and build NDNCERT? [Y/N]" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 8 | read NDNCERT_COMPILE |
| 9 | echo "" |
| 10 | |
| 11 | case $NDNCERT_COMPILE in |
| 12 | N|n) |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 13 | echo "Okay, we'll skip compilation and build." |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 14 | ;; |
| 15 | Y|y) |
| 16 | cd ../ && CXXFLAGS="-O2" ./waf configure |
| 17 | ./waf |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 18 | ;; |
| 19 | *) |
| 20 | echo "Unknown option, build and install is cancelled" |
| 21 | exit |
| 22 | ;; |
| 23 | esac |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 24 | echo "Need sudo to install NDNCERT CLI tools" |
| 25 | sudo ./waf install |
| 26 | echo "" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 27 | |
| 28 | echo "===================================================================" |
| 29 | echo "==" |
| 30 | echo "== Deploying NDNCERT" |
| 31 | echo "==" |
| 32 | echo "===================================================================" |
| 33 | echo "" |
| 34 | echo "Are you sure [Y/n] ?" |
| 35 | read DEPLOY |
| 36 | |
| 37 | case $DEPLOY in |
| 38 | N|n) |
| 39 | echo "Deployment cancelled" |
| 40 | exit |
| 41 | ;; |
| 42 | Y|y) |
| 43 | ;; |
| 44 | *) |
| 45 | echo "Unknown option, deployment cancelled" |
| 46 | exit |
| 47 | ;; |
| 48 | esac |
| 49 | |
| 50 | echo "" |
| 51 | echo "===================================================================" |
| 52 | echo "==" |
| 53 | echo "== Deployment started" |
| 54 | echo "==" |
| 55 | echo "===================================================================" |
| 56 | |
| 57 | echo "Do you want to install ndncert CA for systemd on this machine? [Y/N]" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 58 | read SYSTEMD_INSTALL |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 59 | echo "" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 60 | |
| 61 | case $SYSTEMD_INSTALL in |
| 62 | N|n) |
| 63 | echo "We will not install systemd CA on this machine" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 64 | echo "Successfully finish the deployment of NDNCERT. To run NDNCERT, please use CLI ndncert-ca-server" |
| 65 | exit |
| 66 | ;; |
| 67 | Y|y) |
| 68 | echo "Copying NDNCERT-CA systemd service on this machine" |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 69 | sudo cp $(pwd)/../build/systemd/ndncert-ca.service /etc/systemd/system |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 70 | sudo chmod 644 /etc/systemd/system/ndncert-ca.service |
| 71 | ;; |
| 72 | *) |
| 73 | echo "Unknown option, deployment cancelled" |
| 74 | exit |
| 75 | ;; |
| 76 | esac |
| 77 | |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 78 | echo "" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 79 | echo "ndncert-ca service requires user ndn. Will check it now :D" |
| 80 | if id ndn &>/dev/null; then |
| 81 | echo 'ndn user account found, GOOD!' |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 82 | else |
| 83 | echo 'ndn user not found; adding ndn user as root' |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 84 | sudo useradd ndn |
| 85 | fi |
| 86 | |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 87 | echo "" |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 88 | echo "ndncert-ca service requires /var/lib/ndncert-ca. Will check or create the keychain in /var/lib/ndncert-ca" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 89 | sudo mkdir -p /var/lib/ndncert-ca |
| 90 | sudo chown ndn /var/lib/ndncert-ca |
| 91 | echo '/var/lib/ndncert-ca is ready, GOOD!' |
| 92 | |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 93 | echo "" |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 94 | echo "Do you want to import an exisitng safebag for ${CA_PREFIX}? [Y/N]" |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 95 | read USE_SAFE_BAG |
| 96 | |
| 97 | case $USE_SAFE_BAG in |
| 98 | N|n) |
| 99 | echo "Generating new NDN identity for ${CA_PREFIX}" |
| 100 | sudo HOME=/var/lib/ndncert-ca -u ndn ndnsec-keygen $CA_PREFIX |
| 101 | ;; |
| 102 | Y|y) |
| 103 | echo "Reading the safebag." |
| 104 | echo "What is the safebag file name?" |
| 105 | read SAFE_BAG_PATH |
| 106 | echo "" |
| 107 | |
| 108 | echo "What is the password of the safebag?" |
| 109 | read SAFE_BAG_PWD |
| 110 | echo "" |
| 111 | |
| 112 | sudo HOME=/var/lib/ndncert-ca -u ndn ndnsec-import -i $SAFEBAG_FILE -P $PWD |
| 113 | ;; |
| 114 | *) |
| 115 | echo "Unknown option, deployment cancelled" |
| 116 | exit |
| 117 | ;; |
| 118 | esac |
| 119 | |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 120 | echo "Load the new configuration file for the CA" |
| 121 | echo -e "{\n\"ca-prefix\": \"${CA_PREFIX}\",\n\"ca-info\": \"NDNCERT CA for ${CA_PREFIX}\",\n\"max-validity-period\": \"1296000\",\n\"max-suffix-length\": \"2\",\n\"supported-challenges\":\n[\n{ \"challenge\": \"pin\" }\n]\n}" > /usr/local/etc/ndncert/ca.conf |
| 122 | echo "" |
| 123 | |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 124 | echo "Do you want to start the service now? [Y/N]" |
| 125 | read START_NOW |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 126 | case $START_NOW in |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 127 | N|n) |
| 128 | echo "Successfully finish the deployment of NDNCERT. You can run sudo systemctl start ndncert-ca when you want to start the service" |
| 129 | exit |
| 130 | ;; |
| 131 | Y|y) |
| 132 | echo "Starting the service ndncert-ca" |
| 133 | sudo systemctl start ndncert-ca |
Zhiyi Zhang | c318a7a | 2020-10-17 17:41:19 -0700 | [diff] [blame] | 134 | sleep 2 |
Zhiyi Zhang | 915aa45 | 2020-10-17 17:20:58 -0700 | [diff] [blame] | 135 | echo "Reading the status of service ndncert-ca" |
| 136 | sudo systemctl status ndncert-ca |
| 137 | echo "Successfully finish the deployment of NDNCERT. You can run sudo systemctl status ndncert-ca when you want to check the status of the service" |
| 138 | exit |
| 139 | ;; |
| 140 | *) |
| 141 | echo "Unknown option, deployment cancelled" |
| 142 | exit |
| 143 | ;; |
| 144 | esac |