T-Gander/ProxmoxVEDHelperScripts
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

Update step-ca-install.sh for dynamic input handling

Browse Source 
Updated helper script for CSR request
This commit is contained in:
Joerg Heinemann
2026-02-04 15:18:52 +01:00
committed by GitHub
parent 3fd2382eef
commit e186f0e4c2
1 changed files with 28 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
install/step-ca-install.sh
View File

@@ -238,22 +238,40 @@ $STD cat <<'EOF' >$StepRequest
#!/usr/bin/env bash #!/usr/bin/env bash
# #
StepCertDir="$STEPHOME/certs/x509" StepCertDir="$STEPHOME/certs/x509"
PROVISIONER_PASSWORD=$(step path)/encryption//provisioner.pwd
HOST="brw4cd5770e36b4" while true;
IP="192.168.178.136" do
DOMAIN="fritz.box"
FQDN=$HOST.$DOMAIN FQDN=$(whiptail --title "step ca certificate options" --inputbox 'FQDN (e.g. MyLXC.example.com)' 10 50 "$FQDN" 3>&1 1>&2 2>&3)
VALID_TO="2034-01-31T00:00:00Z" IP=$(dig +short $FQDN)
PROVISIONER="pki@fritz.box" if [[ -z "$IP" ]]; then
echo "Resolution failed for $FQDN"
exit
fi
HOST=$(echo $FQDN | awk -F'.' '{print $1}')
IP=$(whiptail --title "step ca certificate options" --inputbox 'IP (e.g. x.x.x.x)' 10 50 "$IP" 3>&1 1>&2 2>&3)
HOST=$(whiptail --title "step ca init options" --inputbox 'HOST (e.g. MyHostName)' 10 50 "$HOST" 3>&1 1>&2 2>&3)
VALID_TO=$(whiptail --title "step ca init options" --inputbox 'VALID_TO (e.g. 2034-01-31T00:00:00Z)' 10 50 "2034-01-31T00:00:00Z" 3>&1 1>&2 2>&3)
if whiptail_yesno=$(whiptail --title "step ca init options" --yesno "Continue with below?\n
HOST: $HOST
IP: $IP
FQDN: $FQDN
VALID_TO: $VALID_TO" --no-button "Change" --yes-button "Continue" 15 70 3>&1 1>&2 2>&3); then
break
fi
done
step ca certificate $FQDN $StepCertDir/$FQDN.crt $StepCertDir/$FQDN.key \ step ca certificate $FQDN $StepCertDir/$FQDN.crt $StepCertDir/$FQDN.key \
--provisioner=$PROVISIONER \ --provisioner-password-file=$PROVISIONER_PASSWORD \
--not-after=$VALID_TO \ --not-after=$VALID_TO \
--san $FQDN \ --san $FQDN \
--san $HOST \ --san $HOST \
--san $IP --san $IP \
&& step certificate inspect $StepCertDir/$FQDN.crt \
step certificate inspect $StepCertDir/$FQDN.crt || echo "Failed to request certificate"; exit
EOF EOF
$STD cat <<'EOF' >$StepRevoke $STD cat <<'EOF' >$StepRevoke
#!/usr/bin/env bash #!/usr/bin/env bash