CodingPirates/pyscrlink
1
0
Fork 0
mirror of https://github.com/kawasaki/pyscrlink.git synced 2025-09-06 01:30:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

scratch_link.py, gencert.sh: Separate certification and private key

Browse Source 
Now gencert.sh generates private key and certificate for the Secure WSS
server in a single file. This is not good to automate certification
addition to NSS databases. Generate them separately into two files and
initialize the Secure WSS server specifying them.

Signed-off-by: Shin'ichiro Kawasaki <kawasaki@juno.dti.ne.jp>
This commit is contained in:
Shin'ichiro Kawasaki
2020-04-18 17:48:28 +09:00
parent f0bf6e1a6a
commit 8c42fc04b7
2 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
gencert.sh
View File

@@ -1,7 +1,10 @@
#!/bin/bash #!/bin/bash
openssl req -x509 -out scratch-device-manager.pem \ CERT_FILE=scratch-device-manager.cer
-keyout scratch-device-manager.pem -newkey rsa:2048 -nodes -sha256 \ KEY_FILE=scratch-device-manager.key
-days 3650 -extensions EXT -config /dev/stdin << HERE
# Generate certificate and key files
openssl req -x509 -out "${CERT_FILE}" -keyout "${KEY_FILE}" -newkey rsa:2048 \
-nodes -sha256 -days 3650 -extensions EXT -config /dev/stdin << HERE
[dn] [dn]
CN = device-manager.scratch.mit.edu CN = device-manager.scratch.mit.edu
[req] [req]
@@ -10,3 +13,4 @@ distinguished_name = dn
[EXT] [EXT]
subjectAltName = DNS:device-manager.scratch.mit.edu subjectAltName = DNS:device-manager.scratch.mit.edu
HERE HERE

5
scratch_link.py
View File

@@ -529,8 +529,9 @@ class BLESession(Session):
# kick start WSS server # kick start WSS server
ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER) ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
localhost_pem = pathlib.Path(__file__).with_name("scratch-device-manager.pem") localhost_cer = pathlib.Path(__file__).with_name("scratch-device-manager.cer")
ssl_context.load_cert_chain(localhost_pem) localhost_key = pathlib.Path(__file__).with_name("scratch-device-manager.key")
ssl_context.load_cert_chain(localhost_cer, localhost_key)
sessionTypes = { '/scratch/ble': BLESession, '/scratch/bt': BTSession } sessionTypes = { '/scratch/ble': BLESession, '/scratch/bt': BTSession }
async def ws_handler(websocket, path): async def ws_handler(websocket, path):