data

2020-07-30 17:20:30 +09:30
parent c40b6306b3
commit d7d247ee75
2 changed files with 56 additions and 0 deletions
@@ -0,0 +1,19 @@
+echo $VAULT_ADDR $VAULT_TOKEN
+
+curl --request POST --data '{"key": "'$VAULT_UNSEAL_KEY1'"}'  $VAULT_ADDR/v1/sys/unseal
+curl --request POST --data '{"key": "'$VAULT_UNSEAL_KEY2'"}'  $VAULT_ADDR/v1/sys/unseal
+curl --request POST --data '{"key": "'$VAULT_UNSEAL_KEY3'"}'  $VAULT_ADDR/v1/sys/unseal
+
+CERTNAME=$(hostname).{{local_domainname}}
+curl --header "X-Vault-Token: $VAULT_TOKEN" \
+--request POST \
+--data '{"common_name": "'$CERTNAME'", "ttl": "43800h"}' \
+$VAULT_ADDR/v1/rootca_store/issue/{{vaultStoreName}} > certificateResult.txt
+
+jq .data.private_key certificateResult.txt |  sed "s/\"//g" | sed "s/\\\n/\n/g" > cert.pem
+jq .data.certificate certificateResult.txt |  sed "s/\"//g" | sed "s/\\\n/\n/g" > cert.crt
+
+mv cert.pem /etc/ssl/private/$(hostname).{{local_domainname}}.key
+mv cert.crt /etc/ssl/certs/$(hostname).{{local_domainname}}.crt
+
+rm certificateResult.txt