You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
73 lines
2.1 KiB
73 lines
2.1 KiB
18 years ago
|
#!/bin/bash
|
||
|
|
|
||
|
|
echo Creating User Koji environment
|
||
|
|
if [ ! -d ~/.koji ]; then
|
||
|
|
mkdir ~/.koji
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ ! -f ~/.koji/client.crt ]; then
|
||
|
|
if [ -f ~/.fedora.cert ]; then
|
||
|
|
cp ~/.fedora.cert ~/.koji/client.crt
|
||
|
|
else
|
||
|
|
echo "you need a client cert please download one from https://admin.fedoraproject.org/accounts/gen-cert.cgi"
|
||
|
|
echo "Save it to ~/.koji/client.crt"
|
||
|
|
echo "Then run this script again"
|
||
|
|
exit
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ -f ~/.fedora-upload-ca.cert ]; then
|
||
|
|
cp ~/.fedora-upload-ca.cert ~/.koji/clientca.crt
|
||
|
|
else
|
||
|
|
wget "http://fedoraproject.org/wiki/PackageMaintainers/BuildSystemClientSetup?action=AttachFile&do=get&target=fedora-upload-ca.cert" -O ~/.koji/clientca.crt
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ -f ~/.fedora-server-ca.cert ]; then
|
||
|
|
cp ~/.fedora-server-ca.cert ~/.koji/serverca.crt
|
||
|
|
else
|
||
|
|
wget "http://fedoraproject.org/wiki/PackageMaintainers/BuildSystemClientSetup?action=AttachFile&do=get&target=fedora-server-ca.cert" -O ~/.koji/serverca.crt
|
||
|
|
fi
|
||
|
|
|
||
|
|
|
||
|
|
cat > ~/.koji/config <<EOF
|
||
|
|
[koji]
|
||
|
|
|
||
|
|
;configuration for koji cli tool
|
||
|
|
|
||
|
|
;url of XMLRPC server
|
||
|
|
server = http://koji.fedoraproject.org/kojihub
|
||
|
|
|
||
|
|
;url of web interface
|
||
|
|
weburl = http://koji.fedoraproject.org/koji
|
||
|
|
|
||
|
|
;path to the koji top directory
|
||
|
|
;topdir = /mnt/koji
|
||
|
|
|
||
|
|
;configuration for SSL athentication
|
||
|
|
|
||
|
|
;client certificate
|
||
|
|
cert = ~/.koji/client.crt
|
||
|
|
|
||
|
|
;certificate of the CA that issued the client certificate
|
||
|
|
ca = ~/.koji/clientca.crt
|
||
|
|
|
||
|
|
;certificate of the CA that issued the HTTP server certificate
|
||
|
|
serverca = ~/.koji/serverca.crt
|
||
|
|
|
||
|
|
EOF
|
||
|
|
|
||
|
|
echo "creating cert for import into browser to allow user authentication on the website.
|
||
|
|
Choose your own password, you will be propmted for this when using the cert.
|
||
|
|
|
||
|
|
- import pkcs12 cert into Firefox:
|
||
|
|
|
||
|
|
Edit -> Preferences -> Advanced
|
||
|
|
Click "View Certificates"
|
||
|
|
On "Your Certificates" tab, click "Import"
|
||
|
|
Select fedora-client-cert.p12
|
||
|
|
Type the export password (if you specified one)
|
||
|
|
You should see your username appear under "Fedora Project"
|
||
|
|
|
||
|
|
- You should now be able to click the "login" link on the website successfully"
|
||
|
|
openssl pkcs12 -export -in ~/.koji/client.crt -CAfile ~/.koji/clientca.crt -out fedora-client-cert.p12
|