easyrsa.inc

easyrsa_pki_init () {
	if [ ! -d "$2" ]; then
		echo "$1 pki doesn't exist, creating..."
		EASYRSA_PKI=$2 $EASYRSA init-pki >> $LOGFILE
		mkdir $2/issued
		git_init $1 $2
	fi
}

easyrsa_csr_create () {
    PKI=$1
    NAME=$2
    CN=$3
	EASYRSA_PKI=$PKI $EASYRSA --batch --req-cn=$CN gen-req $NAME nopass &>> $LOGFILE
	git_stamp $PKI "creating csr for $CN"
}

easyrsa_csr_import () {
    PKI=$1
    NAME=$2
    CSR=$3
    $EASYRSA --pki-dir=$PKI \
                --batch \
                import-req $CSR $NAME
    git_stamp $PKI "imported csr for $NAME"
}

easyrsa_csr_sign () {
    PKI=$1
    NAME=$2
    CN=$3
    TYPE=$4
    $EASYRSA --pki-dir=$PKI \
                --batch \
                --req-cn="$CN" \
                sign-req $TYPE "$NAME"
    git_stamp $PKI "signed csr for $CN"
}

easyrsa_csr_sign_server () {
        easyrsa_csr_sign $1 $2 $3 "server"
}

easyrsa_device_pki_init () {
	easyrsa_pki_init "device" $EASYRSA_PKI_DEVICE
}

easyrsa_device_pki_exists () {
	if [ ! -d "$EASYRSA_PKI_DEVICE" ]; then
		echo "device pki isn't available"
		exit 1
	fi
}

easyrsa_device_pki_doesntexist () {
	if [ -d "$EASYRSA_PKI_DEVICE" ]; then
		echo "device pki exists"
		exit 1
	fi
}

easyrsa_device_csr_create () {
    UUID=$1
	EASYRSA_PKI=$EASYRSA_PKI_USER $EASYRSA --batch --req-cn=$UUID gen-req device-$UUID nopass &>> $LOGFILE
	git_stamp $EASYRSA_PKI_USER "creating csr for $UUID"
}

easyrsa_device_csr_abort () {
    git_abort $EASYRSA_PKI_USER
}

easyrsa_device_csr_finalise () {
    UUID=$1
	git_stamp $EASYRSA_PKI_USER "certificate received for $UUID"
}

easyrsa_device_csr_import () {
    UUID=$1
    CSR=$2
    $EASYRSA --pki-dir=$EASYRSA_PKI_DEVICE \
                --batch \
                import-req $CSR $UUID
    git_stamp $EASYRSA_PKI_DEVICE "imported csr for $UUID"
}

easyrsa_device_csr_sign () {
    UUID=$1
    $EASYRSA --pki-dir=$EASYRSA_PKI_DEVICE \
                --batch \
                --req-cn="$UUID" \
                sign-req client "$UUID"
    git_stamp $EASYRSA_PKI_DEVICE "signed csr for $UUID"
}

easyrsa_server_pki_init () {
	easyrsa_pki_init "server" $EASYRSA_PKI_SERVER
}

easyrsa_pki_server_exists () {
	if [ ! -d "$EASYRSA_PKI_SERVER" ]; then
		echo "server pki isn't available"
		exit 1
	fi
}

easyrsa_pki_server_doesntexist () {
	if [ -d "$EASYRSA_PKI_SERVER" ]; then
		echo "server pki exists"
		exit 1
	fi
}

easyrsa_user_pki_init () {
	easyrsa_pki_init "user" $EASYRSA_PKI_USER
}

easyrsa_test_pki_init () {
	easyrsa_pki_init "test" $EASYRSA_PKI_TEST
	$EASYRSA --pki-dir=$EASYRSA_PKI_TEST \
        --batch \
        --req-cn="thingy.jp testing root CA" \
        build-ca nopass &>> $LOGFILE
}