mirror of
https://github.com/nsacyber/HIRS.git
synced 2024-12-26 08:01:11 +00:00
151 lines
4.3 KiB
Bash
Executable File
151 lines
4.3 KiB
Bash
Executable File
#!/bin/bash
|
|
#####################################################################################
|
|
#
|
|
# Script to create ACA setup files and configure the hirs_db database.
|
|
#
|
|
#
|
|
#####################################################################################
|
|
# Capture location of the script to allow from invocation from any location
|
|
SCRIPT_DIR=$( dirname -- "$( readlink -f -- "$0"; )"; )
|
|
HIRS_CONF_DIR=/etc/hirs/aca
|
|
LOG_FILE_NAME="hirs_aca_install_"$(date +%Y-%m-%d).log
|
|
LOG_DIR="/var/log/hirs/"
|
|
LOG_FILE="$LOG_DIR$LOG_FILE_NAME"
|
|
HIRS_JSON_DIR="/etc/hirs/aca/default-properties"
|
|
ACA_OPT_DIR="/opt/hirs/aca/"
|
|
ACA_VERSION_FILE="/opt/hirs/aca/VERSION"
|
|
SPRING_PROP_FILE="/etc/hirs/aca/application.properties"
|
|
PROP_FILE='../../../HIRS_AttestationCAPortal/src/main/resources/application.properties'
|
|
COMP_JSON='../../../HIRS_AttestationCA/src/main/resources/component-class.json'
|
|
VENDOR_TABLE='../../../HIRS_AttestationCA/src/main/resources/vendor-table.json'
|
|
|
|
help () {
|
|
echo " Setup script for the HIRS ACA"
|
|
echo " Syntax: sh aca_setup.sh [-u|h|sb|sp|--skip-db|--skip-pki]"
|
|
echo " options:"
|
|
echo " -u | --unattended Run unattended"
|
|
echo " -h | --help Print this Help."
|
|
echo " -sp | --skip-pki run the setup without pki setup."
|
|
echo " -sd | --skip-db run the setup without database setup."
|
|
echo
|
|
}
|
|
|
|
# Process parameters Argument handling
|
|
while [[ $# -gt 0 ]]; do
|
|
case $1 in
|
|
-sd|--skip-db)
|
|
ARG_SKIP_DB=YES
|
|
shift # past argument
|
|
;;
|
|
-sp|--skip-pki)
|
|
ARG_SKIP_PKI=YES
|
|
shift # past argument
|
|
;;
|
|
-u|--unattended)
|
|
ARG_UNATTEND=YES
|
|
shift # past argument
|
|
;;
|
|
-h|--help)
|
|
help
|
|
exit 0
|
|
shift # past argument
|
|
;;
|
|
-*|--*)
|
|
echo "aca_setup.sh: Unknown option $1"
|
|
help
|
|
exit 1
|
|
;;
|
|
*)
|
|
POSITIONAL_ARGS+=("$1") # save positional arg
|
|
# shift # past argumfrom 'build/VERSION'ent
|
|
break
|
|
;;
|
|
esac
|
|
done
|
|
|
|
echo "Input is $1"
|
|
if [[ $1 -eq 1 ]] ; then
|
|
echo "Install detected $1"
|
|
else
|
|
echo "Upgrade detected $1"
|
|
fi
|
|
|
|
# Check for existing installation folders and exist if found
|
|
if [ -z $ARG_UNATTEND ]; then
|
|
if [ -d "/etc/hirs" ]; then
|
|
echo "/etc/hirs exists, aborting install."
|
|
exit 1
|
|
fi
|
|
if [ -d "/opt/hirs" ]; then
|
|
echo "/opt/hirs exists, aborting install."
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
mkdir -p $HIRS_CONF_DIR $LOG_DIR $HIRS_JSON_DIR $ACA_OPT_DIR
|
|
touch "$LOG_FILE"
|
|
|
|
pushd $SCRIPT_DIR &>/dev/null
|
|
# Check if build environment is being used and set up property files
|
|
if [ -f $PROP_FILE ]; then
|
|
cp -n $PROP_FILE $HIRS_CONF_DIR/
|
|
cp -n $COMP_JSON $HIRS_JSON_DIR/
|
|
cp -n $VENDOR_TABLE $HIRS_JSON_DIR/
|
|
fi
|
|
|
|
echo "ACA setup log file is $LOG_FILE"
|
|
|
|
if [ "$EUID" -ne 0 ]
|
|
then echo "This script requires root. Please run as root"
|
|
exit 1
|
|
fi
|
|
|
|
echo "HIRS ACA Setup initiated on $(date +%Y-%m-%d)" >> "$LOG_FILE"
|
|
|
|
# Create a version file for bootRun to use
|
|
if command -v git &> /dev/null; then
|
|
git rev-parse --is-inside-work-tree &> /dev/null;
|
|
if [ $? -eq 0 ]; then
|
|
jarVersion=$(cat '../../../VERSION').$(date +%s).$(git rev-parse --short HEAD)
|
|
echo $jarVersion > $ACA_VERSION_FILE
|
|
fi
|
|
fi
|
|
|
|
# Set HIRS PKI password
|
|
if [ -z $HIRS_PKI_PWD ]; then
|
|
# Create a 32 character random password
|
|
PKI_PASS=$(head -c 64 /dev/urandom | md5sum | tr -dc 'a-zA-Z0-9')
|
|
echo "Using randomly generated password for the PKI key password" | tee -a "$LOG_FILE"
|
|
else
|
|
PKI_PASS=$HIRS_PKI_PWD
|
|
echo "Using system supplied password for the PKI key password" | tee -a "$LOG_FILE"
|
|
fi
|
|
|
|
if [ -z "${ARG_SKIP_PKI}" ]; then
|
|
../pki/pki_setup.sh $LOG_FILE $PKI_PASS $ARG_UNATTEND
|
|
if [ $? -eq 0 ]; then
|
|
echo "ACA PKI setup complete" | tee -a "$LOG_FILE"
|
|
else
|
|
echo "Error setting up ACA PKI" | tee -a "$LOG_FILE"
|
|
exit 1
|
|
fi
|
|
else
|
|
echo "ACA PKI setup not run due to command line argument: $ORIGINAL_ARGS" | tee -a "$LOG_FILE"
|
|
fi
|
|
|
|
if [ -z "${ARG_SKIP_DB}" ]; then
|
|
../db/db_create.sh $LOG_FILE $PKI_PASS $ARG_UNATTEND
|
|
if [ $? -eq 0 ]; then
|
|
echo "ACA database setup complete" | tee -a "$LOG_FILE"
|
|
else
|
|
echo "Error setting up ACA DB" | tee -a "$LOG_FILE"
|
|
exit 1
|
|
fi
|
|
else
|
|
echo "ACA Database setup not run due to command line argument: $ORIGINAL_ARGS" | tee -a "$LOG_FILE"
|
|
fi
|
|
|
|
echo "ACA setup complete" | tee -a "$LOG_FILE"
|
|
|
|
popd &>/dev/null
|