Parcourir la source

Autocomplete fields in email client cert

Bob Mottram il y a 9 ans
Parent
révision
faee7f9d91
2 fichiers modifiés avec 8 ajouts et 2 suppressions
  1. 1
    1
      src/freedombone
  2. 7
    1
      src/freedombone-clientcert

+ 1
- 1
src/freedombone Voir le fichier

@@ -5698,7 +5698,7 @@ function configure_imap_client_certs {
5698 5698
   echo 'serial = sslserial' >> /etc/ssl/dovecot-ca.cnf
5699 5699
   echo 'default_days = 3650' >> /etc/ssl/dovecot-ca.cnf
5700 5700
   echo 'default_md = sha256' >> /etc/ssl/dovecot-ca.cnf
5701
-  echo 'default_bits = 2048' >> /etc/ssl/dovecot-ca.cnf
5701
+  echo 'default_bits = 4096' >> /etc/ssl/dovecot-ca.cnf
5702 5702
   echo 'policy = dovecot-ca_policy' >> /etc/ssl/dovecot-ca.cnf
5703 5703
   echo 'x509_extensions = dovecot-ca_extensions' >> /etc/ssl/dovecot-ca.cnf
5704 5704
   echo '' >> /etc/ssl/dovecot-ca.cnf

+ 7
- 1
src/freedombone-clientcert Voir le fichier

@@ -33,6 +33,12 @@
33 33
 # along with this program. If not, see <http://www.gnu.org/licenses/>.
34 34
 
35 35
 USERNAME=
36
+COUNTRY_CODE="US"
37
+AREA="Free Speech Zone"
38
+LOCATION="Freedomville"
39
+ORGANISATION="Freedombone"
40
+UNIT="Freedombone Unit"
41
+EXTENSIONS=""
36 42
 
37 43
 function show_help {
38 44
     echo ''
@@ -95,7 +101,7 @@ chmod 600 /etc/dovecot/passwd-file
95 101
 freedombone-addcert -h $USERNAME
96 102
 
97 103
 # create a certificate request
98
-openssl req -new -sha256 -key /etc/ssl/private/$USERNAME.key -out /etc/ssl/requests/$USERNAME.csr
104
+openssl req -new -sha256 -subj "/O=$ORGANISATION/OU=$UNIT/C=$COUNTRY_CODE/ST=$AREA/L=$LOCATION/CN=$USERNAME" -key /etc/ssl/private/$USERNAME.key -out /etc/ssl/requests/$USERNAME.csr
99 105
 
100 106
 # sign the certificate request
101 107
 openssl ca -config /etc/ssl/dovecot-ca.cnf -in /etc/ssl/requests/$USERNAME.csr -out /etc/ssl/certs/$USERNAME.cer