adds the directory structure for keys used by various functions

2013-08-09 16:43:59 -04:00 · 2013-08-09 16:43:59 -04:00 · 5079615e69
parent f66eb18558
commit 5079615e69
16 changed files with 45 additions and 0 deletions
--- a/keys/.gitignore
+++ b/keys/.gitignore
@ -0,0 +1,10 @@
+*.jks
+*.crt
+*.b64
+*.p12
+*.csr
+*.keystore
+
+*.cer
+*.key
+*.certSigningRequest
--- a/keys/apk/this-is-for-android
+++ b/keys/apk/this-is-for-android
--- a/keys/apns/this-is-your-push-certificate-with-apns
+++ b/keys/apns/this-is-your-push-certificate-with-apns
--- a/keys/certificates/this-is-your-xcode-certificate
+++ b/keys/certificates/this-is-your-xcode-certificate
--- a/keys/client/make
+++ b/keys/client/make
@ -0,0 +1,3 @@
+keytool -genkeypair -alias client -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias client -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias client -file selfsignedcert.cer -keystore truststore.jks
--- a/keys/james/final/post-process
+++ b/keys/james/final/post-process
@ -0,0 +1,4 @@
+cp ../mail_mailiverse_com.jks .
+#keytool -import -trustcacerts -alias root -file ../mail_mailiverse_com/AddTrustExternalCARoot.crt -keystore mail_mailiverse_com.jks
+keytool -import -trustcacerts -alias POSITIVESSL -file ../mail_mailiverse_com/PositiveSSLCA2.crt -keystore mail_mailiverse_com.jks
+keytool -import -trustcacerts -alias james -file ../mail_mailiverse_com/mail_mailiverse_com.crt -keystore mail_mailiverse_com.jks
--- a/keys/james/make
+++ b/keys/james/make
@ -0,0 +1,2 @@
+keytool -genkeypair -alias james -keyalg RSA -keysize 2048 -keystore mail_mailiverse_com.jks
+keytool -certreq -alias james -keyalg RSA -file mail_mailiverse_com.csr -keystore mail_mailiverse_com.jks
--- a/keys/james/this-is-the-official-mail-server-ssl-certificates
+++ b/keys/james/this-is-the-official-mail-server-ssl-certificates
--- a/keys/key/make
+++ b/keys/key/make
@ -0,0 +1,3 @@
+keytool -genkeypair -alias piratekey -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias piratekey -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias piratekey -file selfsignedcert.cer -keystore truststore.jks
--- a/keys/localrelay/make
+++ b/keys/localrelay/make
@ -0,0 +1,3 @@
+keytool -genkeypair -alias localrelay.mailiverse -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias localrelay.mailiverse -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias localrelay.mailiverse -file selfsignedcert.cer -keystore truststore.jks
--- a/keys/localrelay/this-is-the-key-file-for-the-web-mail-submission
+++ b/keys/localrelay/this-is-the-key-file-for-the-web-mail-submission
--- a/keys/mail/make
+++ b/keys/mail/make
@ -0,0 +1,3 @@
+keytool -genkeypair -alias piratemail -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias piratemail -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias piratemail -file selfsignedcert.cer -keystore truststore.jks
--- a/keys/nginx/clean
+++ b/keys/nginx/clean
@ -0,0 +1,2 @@
+rm store.*
+rm final.*
--- a/keys/nginx/convert
+++ b/keys/nginx/convert
@ -0,0 +1,12 @@
+set -x
+
+JKSSTORE=mail_mailiverse_com.jks
+cp $JKSSTORE store.jks
+
+keytool -importkeystore -srckeystore store.jks -srcstoretype JKS -deststoretype PKCS12 -destkeystore store.p12
+openssl pkcs12 -in store.p12 -nocerts -out store.key
+openssl rsa -in store.key -out final.key
+
+cat mail_mailiverse_com.crt > final.crt
+cat PositiveSSLCA2.crt >> final.crt
+cat AddTrustExternalCARoot.crt >> final.crt
--- a/keys/nginx/this-is-the-mail-server-ssl-certificate-modified-to-work-with-nginx
+++ b/keys/nginx/this-is-the-mail-server-ssl-certificate-modified-to-work-with-nginx
--- a/keys/push/make
+++ b/keys/push/make
@ -0,0 +1,3 @@
+keytool -genkeypair -alias client -keyalg RSA -keysize 2048 -keystore keystore.jks
+keytool -export -alias client -keystore keystore.jks -rfc -file selfsignedcert.cer
+keytool -import -alias client -file selfsignedcert.cer -keystore truststore.jks