mirror of
https://github.com/nsacyber/HIRS.git
synced 2024-12-19 04:58:00 +00:00
97 lines
3.6 KiB
PowerShell
97 lines
3.6 KiB
PowerShell
param (
|
|
[switch]$sd, [switch]${skip-db} = $false,
|
|
[switch]$sp, [switch]${skip-pki} = $false,
|
|
[switch]$u, [switch]$unattended = $false,
|
|
[switch]$h, [switch]$help = $false
|
|
)
|
|
|
|
$APP_HOME=(Split-Path -parent $PSCommandPath)
|
|
$ACA_COMMON_SCRIPT=(Join-Path $APP_HOME 'aca_common.ps1')
|
|
$COMP_JSON=(Join-Path $APP_HOME '..' '..' '..' 'HIRS_AttestationCA' 'src' 'main' 'resources' 'component-class.json')
|
|
$VENDOR_TABLE=(Join-Path $APP_HOME '..' '..' '..' 'HIRS_Utils' 'src' 'main' 'resources' 'vendor-table.json')
|
|
|
|
# Load other scripts
|
|
. $ACA_COMMON_SCRIPT
|
|
|
|
# Set up log
|
|
set_up_log
|
|
echo "-----------------------------------------------------------" | WriteAndLog
|
|
echo "ACA setup log file is $global:LOG_FILE" | WriteAndLog
|
|
echo ("Running with these arguments: "+($PSBoundParameters | Out-String)) | WriteAndLog
|
|
|
|
# Read aca.properties
|
|
mkdir -F -p $global:HIRS_CONF_DIR 2>&1 > $null
|
|
mkdir -F -p $global:HIRS_CONF_DEFAULT_PROPERTIES_DIR 2>&1 > $null
|
|
mkdir -F -p $global:HIRS_DATA_LOG_DIR 2>&1 > $null
|
|
cp $COMP_JSON $global:HIRS_CONF_DEFAULT_PROPERTIES_DIR
|
|
cp $VENDOR_TABLE $global:HIRS_CONF_DEFAULT_PROPERTIES_DIR
|
|
touch $global:HIRS_DATA_ACA_PROPERTIES_FILE # create it, if it doesn't exist
|
|
read_aca_properties $global:HIRS_DATA_ACA_PROPERTIES_FILE
|
|
|
|
# Read spring application.properties
|
|
touch $global:HIRS_DATA_SPRING_PROP_FILE # create it, if it doesn't exist
|
|
read_spring_properties $global:HIRS_DATA_SPRING_PROP_FILE
|
|
|
|
# Parameter Consolidation
|
|
$skipdb=$sd -or ${skip-db}
|
|
$skippki=$sp -or ${skip-pki}
|
|
$unattended=$u -or $unattended
|
|
$help = $h -or $help
|
|
|
|
if ($help) {
|
|
echo " Setup script for the HIRS ACA"
|
|
echo " Syntax: sh aca_setup.sh [-u|h|sd|sp|--skip-db|--skip-pki]"
|
|
echo " options:"
|
|
echo " -u | --unattended Run unattended"
|
|
echo " -h | --help Print this Help."
|
|
echo " -sp | --skip-pki run the setup without pki setup."
|
|
echo " -sb | --skip-db run the setup without database setup."
|
|
exit 1
|
|
}
|
|
|
|
if(!(New-Object Security.Principal.WindowsPrincipal(
|
|
[Security.Principal.WindowsIdentity]::GetCurrent())
|
|
).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) {
|
|
echo "This script requires root. Please run as root"
|
|
exit 1
|
|
}
|
|
|
|
|
|
|
|
echo "HIRS ACA Setup initiated on $(date +%Y-%m-%d)" | WriteAndLog
|
|
|
|
if (!$skippki) {
|
|
if (!$Env:HIRS_PKI_PWD) {
|
|
$HIRS_PKI_PWD=(create_random)
|
|
# NOTE: Writing to the environment variable did not work within the container
|
|
# This password will be stored in the ACA properties file.
|
|
echo "Using randomly generated password for the PKI key password" | WriteAndLog
|
|
Write-Host "NOT LOGGED: Using pki password=$HIRS_PKI_PWD"
|
|
} else {
|
|
$HIRS_PKI_PWD=$Env:HIRS_PKI_PWD
|
|
echo "Using system supplied password for the PKI key password" | WriteAndLog
|
|
}
|
|
pwsh -ExecutionPolicy Bypass $global:HIRS_REL_WIN_PKI_SETUP -LOG_FILE:"$global:LOG_FILE" -PKI_PASS:"$HIRS_PKI_PWD" -UNATTENDED:"$unattended"
|
|
if ($LastExitCode -eq 0) {
|
|
echo "ACA PKI setup complete" | WriteAndLog
|
|
} else {
|
|
echo "Error setting up ACA PKI" | WriteAndLog
|
|
exit 1
|
|
}
|
|
} else {
|
|
echo ("ACA PKI setup not run due to presence of command line argument: "+($PSBoundParameters.Keys | grep -E "skip-pki|sp")) | WriteAndLog
|
|
}
|
|
|
|
if (!$skipdb) {
|
|
pwsh -ExecutionPolicy Bypass $global:HIRS_REL_WIN_DB_CREATE -LOG_FILE:"$global:LOG_FILE" -UNATTENDED:"$unattended"
|
|
if ($LastExitCode -eq 0) {
|
|
echo "ACA database setup complete" | WriteAndLog
|
|
} else {
|
|
echo "Error setting up ACA DB" | WriteAndLog
|
|
exit 1
|
|
}
|
|
} else {
|
|
echo ("ACA Database setup not run due to command line argument: "+($PSBoundParameters.Keys | grep -E "skip-db|sd")) | WriteAndLog
|
|
}
|
|
|
|
echo "ACA setup complete" | WriteAndLog |