gen-html

#!/usr/bin/env bash
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

# Derek Moore <derek.moore@gmail.com>
# Christian Göttsche <cgzones@googlemail.com>

set -eu
set -o pipefail

umask 0077

BIN_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
source "${BIN_DIR}/functions"
source "${BIN_DIR}/defaults.conf"

usage() {
    echo "Usage: $0 [-f]"
    echo "    Create a shareable html directory, containing root and signing"
    echo "    certificates as well as the certificate revokation list"
    echo
    echo "Options:"
    echo "    -f       Override existing html directory"
}

if [ ! -f ca/ca.crt ]; then
    echo -e "$ERR Must be run inside a CA directory!"
    exit 2
fi

FORCE=0

while getopts hf FLAG; do
    case $FLAG in
        h) echo -e -n "$SUCC " && usage && exit 0 ;;
        f) FORCE=1 ;;
        *) echo -e -n "$ERR " && usage && exit 2 ;;
        #xy) VAR=${OPTARG} ;;
    esac
done

if [ -d html ]; then
    if [ $FORCE -ne 1 ]; then
        echo -e "$ERR Html directory exists already!"
        echo "Specify -f to override"
        exit 2
    fi

    rm -Rf html/ca/
    rmdir html
fi

echo -e "$NOTE Creating directory structure"

mkdir html/
mkdir html/ca/
mkdir html/ca/ssh

if openssl verify -CAfile ca/ca.crt ca/ca.crt >/dev/null 2>&1; then
    echo -e "$NOTE Creating index.html for root CA"

    CA_HTML_ROOT_TITLE=$(openssl x509 -noout -subject -in ca/ca.crt -nameopt multiline | grep commonName | cut -d "=" -f 2-)
    CA_HTML_ROOT_NAME=$(echo "$CA_HTML_ROOT_TITLE" | sed 's/\s\+/_/g')
    CA_HTML_ROOT_HASH=$(openssl x509 -noout -fingerprint -sha1 -in ca/ca.crt | cut -d '=' -f 2-)


    template "${BIN_DIR}/templates/root_index.tpl" "html/ca/index.html"

    echo -e "$NOTE Copying certs"

    cp ca/ca.crt "html/ca/${CA_HTML_ROOT_NAME}.crt"
    cp ca/ca.crl "html/ca/${CA_HTML_ROOT_NAME}.crl"
    cp ca/ssh/ca.ssh.pub "html/ca/ssh/${CA_HTML_ROOT_NAME}.pub"

    ln -s "${CA_HTML_ROOT_NAME}.crt" "html/ca/$CA_NAME.crt"
    ln -s "${CA_HTML_ROOT_NAME}.crl" "html/ca/$CA_NAME.crl"
    ln -s "${CA_HTML_ROOT_NAME}.pub" "html/ca/ssh/$CA_NAME.pub"

    echo -e "$SUCC html directory successfully created"
else
    echo -e "$NOTE Creating index.html for sign CA"

    CA_HTML_ROOT_TITLE=$(openssl x509 -noout -subject -in ca/root.crt -nameopt multiline | grep commonName | cut -d "=" -f 2-)
    CA_HTML_ROOT_NAME=$(echo "$CA_HTML_ROOT_TITLE" | sed 's/\s\+/_/g')
    CA_HTML_ROOT_HASH=$(openssl x509 -noout -fingerprint -sha1 -in ca/root.crt | cut -d '=' -f 2-)
    export CA_HTML_ROOT_HASH

    CA_HTML_SIGN_TITLE=$(openssl x509 -noout -subject -in ca/ca.crt -nameopt multiline | grep commonName | cut -d "=" -f 2-)
    CA_HTML_SIGN_NAME=$(echo "$CA_HTML_SIGN_TITLE" | sed 's/\s\+/_/g')
    CA_HTML_SIGN_HASH=$(openssl x509 -noout -fingerprint -sha1 -in ca/ca.crt | cut -d '=' -f 2-)
    export CA_HTML_SIGN_HASH


    template "${BIN_DIR}/templates/sign_index.tpl" "html/ca/index.html"

    echo -e "$NOTE Copying certs"

    cp ca/root.crt "html/ca/${CA_HTML_ROOT_NAME}.crt"
    cp ca/ca.crt "html/ca/${CA_HTML_SIGN_NAME}.crt"
    cp ca/ca.crl "html/ca/${CA_HTML_SIGN_NAME}.crl"
    cp ca/ssh/ca.ssh.pub "html/ca/ssh/${CA_HTML_SIGN_NAME}.pub"

    ln -s "${CA_HTML_SIGN_NAME}.crt" "html/ca/$CA_NAME.crt"
    ln -s "${CA_HTML_SIGN_NAME}.crl" "html/ca/$CA_NAME.crl"
    ln -s "${CA_HTML_SIGN_NAME}.pub" "html/ca/ssh/$CA_NAME.pub"

    echo -e "$SUCC html directory successfully created"
fi