From 490264b35aea6886f4cc5a9e6238298881f97387 Mon Sep 17 00:00:00 2001 From: Tau Date: Tue, 20 Aug 2019 13:05:00 -0400 Subject: [PATCH] Check in a canonical PKI For some reason initpki doesn't generate a set of certs that are acceptable to the P-Ras core, even though I never modified it. Maybe some defaults changed in a recent release of OpenSSL or something. Well, to make everybody's life easier let's all just use the same private keys for everything. It's not like it matters. --- .gitignore | 1 - initpki | 3 +++ pki/billing.key | 16 ++++++++++++++++ pki/billing.pub | Bin 0 -> 162 bytes pki/ca.crt | Bin 0 -> 817 bytes pki/ca.key | 28 ++++++++++++++++++++++++++++ pki/ca.pem | 20 ++++++++++++++++++++ pki/server.key | 28 ++++++++++++++++++++++++++++ pki/server.pem | 17 +++++++++++++++++ 9 files changed, 112 insertions(+), 1 deletion(-) create mode 100644 pki/billing.key create mode 100644 pki/billing.pub create mode 100644 pki/ca.crt create mode 100644 pki/ca.key create mode 100644 pki/ca.pem create mode 100644 pki/server.key create mode 100644 pki/server.pem diff --git a/.gitignore b/.gitignore index fd7bff8..7a78638 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,5 @@ bin/ node_modules/ -pki/ state/ .env hostname.txt diff --git a/initpki b/initpki index 08e2e09..53848aa 100755 --- a/initpki +++ b/initpki @@ -1,5 +1,8 @@ #!/bin/sh +# This shell script documents the process that was used to generate our fake +# P-Ras PKI. It should not need to be run again under normal circumstances. + set -e D=`dirname $0` diff --git a/pki/billing.key b/pki/billing.key new file mode 100644 index 0000000..39d1804 --- /dev/null +++ b/pki/billing.key @@ -0,0 +1,16 @@ +-----BEGIN PRIVATE KEY----- +MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAML2GPUuzv2N4bYC +xtc5bZSzolHFWdCUbP+whjr3K98FOLnYeoi7mtUSUUYOW8wIqy6WM3c4c0Bp7FcQ +LnZ0zWMm1TfLGHZzZmk5n7Iv6HDPr3ehDgbWLnOpRrVqZDxpAGD2vQb4p2DW4I2x +GUqnqDa++C8dH/0lXqE6cqwGXNGtAgMBAAECgYEAizgPhG4Dk55QkpeTBDfXH3vT +Ko9B3qdO2ptkjxDX/C8PXe7POXq2SvcEoIE6Xg3Gp8LMR5NBAbth8J32f9JSov3P +SiGCGno4k2i2s3jRuVg76FGLDsZH/N1dt4h78VnW0VlInwaM6bQv3zp0u8rXVk/P +wpYh9AGmquBJS3VYUcECQQD0PDRe28SrhollygGZSO321rYbYhoTIstDXZWyQ/y/ +PWKNwNHcYTHIVGmTrJx2AJUyr1tJhwjiOwlsI5Y1Q4/9AkEAzFpFPcs1r/xgSFxB +eYrcNseWYbVajtVxG9t57sayaEQbH2UMNA2vqSYK/nU6oJhj5eLRIsPHlA5ZbIiZ +rvc/cQJAKS0RQ0DX+ncXKQMSm+4wuGHgl+NFNB60mCnp+AEAVpmZyP5OI1J7myOo +HQ6H3lkgzkfEIzRR6ho773BcfaRjXQJAfS4nEE11G9ML4AezjBLGB0CIHF6NlMWn +PhtaPCy3iSt/OeIacaCYpJNLVMjXGx1+xIoG9rbbgRSxLs0W55lJ4QJBALOUVcNw +GKEJdxhIkA8iuUlEyGpKluAgHUNOOKvC3ogRoB0OyH+If/9o8wWDfxgexgM0zGBc +u178W9XDW+IijDA= +-----END PRIVATE KEY----- diff --git a/pki/billing.pub b/pki/billing.pub new file mode 100644 index 0000000000000000000000000000000000000000..b1197504c9dc5a356848775b38c37d46445cf24b GIT binary patch literal 162 zcmV;T0A2qufuAr91_>&LNQUZADTg(WnE|xQQICDU0>{k#jc67~SCe=5~ z7 Qp*nJ`23*mt0s{d60U38jr~m)} literal 0 HcmV?d00001 diff --git a/pki/ca.crt b/pki/ca.crt new file mode 100644 index 0000000000000000000000000000000000000000..8c131b5a1ed276e7aec625cffa92a7e7bd9ddcb7 GIT binary patch literal 817 zcmXqLV%9ZiViH}z%*4pVB;vg8j`*=x_wq9fvv!@CKGXF)?`uZ`UN%mxHjlRNyo`+8 ztPBRKh5`nBY|No7%slKarMbD4&W?tH2K*oqE*=iBNPxGefr2=%p@pG=p{b#zv4N>! zlmx$#A&LO81~oA%Av=MQm4Ug5k)Oe!iIIz`iII`vo{UqO{=@LK$HSx#olXC`WUkGT zZ_$hodfoCj-C0|)KWY7Hp~9N3-P_tbzIL8$_Ikt3s{en5v)_&FM}DcAp36>cGmw}1 zFO;bI;M!@19JxvRyWgL8HCb|@VP8?b_EFw<4&pMh*@veG?s;d;{Mgjwz0j*^!um5# zwybZ=xSD3a##Me$q7Jq!H=Ygzui*}C$mo_D=f>fxjABCdP9t}H&f_{0H&@QXJW zhHY=Jb~w#6pKqJ8_<^@27x&)Debj7~|Dfx|1MU{D%}4ItGko@<@1ajYz_S(`XpyK!t28RGKye=WH=L48JFN@e+Z9wV(l@$XE`j0}v6gAD== zWPx!Y%f}+dB66fWI+pM5il`0!Hcu}n{R@14Y}^e@$+rJ zt^S2r&O0D?BHiKYguV9zmOo$Ea*MlXU-H6CTech?n*{zA0sYPk4?nVU2QV?KCL9w# zu$ISc+NZ`FeFuVBRg<;e`ec8eYIr_h+)>%k?YrJhuQcb7RjEvUf%f5PHRfrz zwDsJBHQ}e09~8Z6?4wY>vhM1S;`Gf1uM`50{^prHDOkvw<%-hoYY*i%FETxSnd4&F zZ^xA->usWT$|m`j@ygc5Yzi^Ud#`-%9y6!jO6CdGQVF}w6c%2ITjZ2e(D|Pu(=a(A bspqgr*2AjHLHl~&Xi3)|`oeYj