diff --git a/configs/gen_metadata.sh b/configs/gen_metadata.sh index 17a9b994..0ab8a91e 100755 --- a/configs/gen_metadata.sh +++ b/configs/gen_metadata.sh @@ -1,12 +1,43 @@ #!/bin/sh -cat < /dev/null + +export DM_CRYPT="$(tr -d -c "a-zA-Z0-9" < /dev/urandom | fold -w512 | head -n 1)" +export CERT_PEM="$(vault kv get --field=cert.pem fic/cert/fic.srs.epita.fr | escape_newline)" +export CHAIN_PEM="$(vault kv get --field=chain.pem fic/cert/fic.srs.epita.fr | espace_newline)" +export FULLCHAIN_PEM="$(vault kv get --field=fullchain.pem fic/cert/fic.srs.epita.fr | escape_newline)" +export PRIVKEY_PEM="$(vault kv get --field=privkey.pem fic/cert/fic.srs.epita.fr | escape_newline)" + + +ssh-keygen -a 100 -t ed25519 -q -f "$SSH_PATH" -N "" <<< 'y' + +export SYNCRO_PUBLIC_KEY="$(cat "$SSH_PATH".pub | escape_newline)" +export SYNCRO_PRIVATE_KEY="$(cat "$SSH_PATH" | escape_newline)" + +echo -e "\n\nGenerating DH params please wait" + +openssl dhparam -out "$DHPARAM_PATH" 4096 &>/dev/null +export DHPARAM="$(cat "$DHPARAM_PATH" | escape_newline)" + +TEMPLATE=' { "dm-crypt": { "entries": { "key": { "perm": "0440", - "content": "dummy content to be replaced by generated random bytes" + "content": "${DM_CRYPT}" } } }, @@ -22,11 +53,11 @@ cat < "$OUTPUT_PATH" + +echo "Result in $OUTPUT_PATH"