mirror of
https://github.com/openziti/ziti.git
synced 2026-10-12 23:32:02 +00:00
Michael Quigley
50 lines
2.2 KiB
Bash
Executable File
50 lines
2.2 KiB
Bash
Executable File
#!/bin/bash
|
|
. ziti.env
|
|
|
|
router_name=$(hostname)
|
|
echo "Generating a key, a server certificate and client certificate for ${router_name}"
|
|
echo ".......... Generating key for ${router_name}"
|
|
ziti pki create key --pki-root="${ZITI_PKI}" --ca-name="${intermediate_name}" --key-file="${router_name}"
|
|
echo ".......... Generating server certificate for ${router_name}"
|
|
ziti pki create server --pki-root="${ZITI_PKI}" --ca-name="${intermediate_name}" --key-file="${router_name}" --server-file="${router_name}-server" --dns "localhost" --dns "${router_name}" --ip "127.0.0.1"
|
|
echo ".......... Generating client certificate for ${router_name}"
|
|
ziti pki create client --pki-root="${ZITI_PKI}" --ca-name="${intermediate_name}" --key-file="${router_name}" --client-file="${router_name}-client" --client-name="${router_name}"
|
|
echo "Creating a file with the root CA, intermediate and the identity cert - some processes require the full chain to be supplied"
|
|
cat "${ZITI_PKI}/${intermediate_name}/certs/${router_name}-server.chain.pem" "${ZITI_PKI}/${ca_name}/certs/${ca_name}.cert" > "${ZITI_PKI}/${intermediate_name}/certs/${router_name}-full-chain.pem"
|
|
|
|
cat > $ZITI_HOME/${router_name}.yml <<RouterConfigHereDoc
|
|
v: 2
|
|
|
|
identity:
|
|
ca: "${ZITI_PKI}/${intermediate_name}/certs/${intermediate_name}-full-chain.pem"
|
|
key: "${ZITI_PKI}/${intermediate_name}/keys/${router_name}.key"
|
|
cert: "${ZITI_PKI}/${intermediate_name}/certs/${router_name}-client.cert"
|
|
server_cert: "${ZITI_PKI}/${intermediate_name}/certs/${router_name}-full-chain.pem"
|
|
|
|
trace:
|
|
path: "$ZITI_HOME/${router_name}.trace"
|
|
|
|
ctrl:
|
|
endpoint: "tls:${fabric_controller_name}:6262"
|
|
|
|
#link:
|
|
# listener: "tls:0.0.0.0:6000"
|
|
# advertise: "tls:${router_name}:6000"
|
|
|
|
listeners:
|
|
- binding: transport
|
|
address: tls:0.0.0.0:7000
|
|
options:
|
|
retransmission: true
|
|
randomDrops: false
|
|
drop1InN: 500
|
|
|
|
RouterConfigHereDoc
|
|
|
|
# register the router and start it...
|
|
echo "registering router ${router_name} with fabric controller at ${fabric_controller_uri}"
|
|
ziti-fabric create router -e "${fabric_controller_uri}" "${ZITI_PKI}/${intermediate_name}/certs/${router_name}-client.cert"
|
|
|
|
echo "starting router ${router_name}"
|
|
ziti-router run $ZITI_HOME/${router_name}.yml
|