X-Git-Url: http://git.squeep.com/?p=awsible;a=blobdiff_plain;f=generate-ansible-vpcaccess-vars.sh;fp=generate-ansible-vpcaccess-vars.sh;h=0a5d14a62aedf2a732c02ba1da3a4906c0481086;hp=0000000000000000000000000000000000000000;hb=37253e1b3651d2e3f1c714c55fb05894abacf398;hpb=588872ef49cb75a5ffa775e738ae3c61f9d7bad0

diff --git a/generate-ansible-vpcaccess-vars.sh b/generate-ansible-vpcaccess-vars.sh
new file mode 100755
index 0000000..0a5d14a
--- /dev/null
+++ b/generate-ansible-vpcaccess-vars.sh
@@ -0,0 +1,38 @@
+#!/bin/sh
+
+set -e
+
+if [ $# -ne 2 ]
+then
+	echo "usage: $(basename "$0") environment region"
+	exit 64
+fi
+
+ca_cert="${1}_ca/pki/ca.crt"
+crl_pem="${1}_ca/pki/crl.pem"
+cert="${1}_ca/pki/issued/${2}.${1}.crt"
+key="${1}_ca/pki/private/${2}.${1}.key"
+ta_secret="${1}_ca/pki/ta.key"
+
+function onlycert(){
+	sed -n '/-----BEGIN /,/-----END /p' "$@"
+}
+function indent(){
+	sed 's/^/  /' "$@"
+}
+
+cat<<EOF
+---
+QUAGGA_PASSWORD: $(pwgen -y 16)
+ca_name: $1
+ca_cert: |
+$(indent "${ca_cert}")
+crl_pem: |
+$(indent "${crl_pem}")
+cert: |
+$(onlycert "${cert}" | indent)
+key: |
+$(indent "${key}")
+ta_secret: |
+$(indent "${ta_secret}")
+EOF