244060fddc
- Restconf auth=none changes - Load clixon-restconf and resolve features earlier so that config features work - Removed auth=none code from example (this was non-std half-baked basic auth) - Changed tests that used auth-type=none to enable feature clixon-restconf:allow-auth-none - Moved cert creation from sub-shell to servercert function - Fixed typos for dockerfile rename of restconf evhtp to native
129 lines
4.4 KiB
Bash
Executable file
129 lines
4.4 KiB
Bash
Executable file
#!/bin/sh
|
|
# ***** BEGIN LICENSE BLOCK *****
|
|
#
|
|
# Copyright (C) 2017-2019 Olof Hagsand
|
|
# Copyright (C) 2020-2021 Olof Hagsand and Rubicon Communications, LLC(Netgate)
|
|
#
|
|
# This file is part of CLIXON
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# Alternatively, the contents of this file may be used under the terms of
|
|
# the GNU General Public License Version 3 or later (the "GPL"),
|
|
# in which case the provisions of the GPL are applicable instead
|
|
# of those above. If you wish to allow use of your version of this file only
|
|
# under the terms of the GPL, and not to allow others to
|
|
# use your version of this file under the terms of Apache License version 2,
|
|
# indicate your decision by deleting the provisions above and replace them with
|
|
# the notice and other provisions required by the GPL. If you do not delete
|
|
# the provisions above, a recipient may use your version of this file under
|
|
# the terms of any one of the Apache License version 2 or the GPL.
|
|
#
|
|
# ***** END LICENSE BLOCK *****
|
|
|
|
# Clixon startscript for evhtp and https
|
|
# This script is copied into the container on build time and runs
|
|
# _inside_ the container at start in runtime. It gets environment variables
|
|
# from the start.sh script.
|
|
# It starts a backend, a restconf daemon and exposes ports for restconf, and the sleeps
|
|
# See also Dockerfile of the example
|
|
# Log msg, see with docker logs
|
|
|
|
set -ux # e but clixon_backend may fail if test is run in parallell
|
|
|
|
>&2 echo "$0"
|
|
|
|
# If set, enable debugging (of backend and restconf daemons)
|
|
: ${DBG:=0}
|
|
|
|
# Web user default (ie what RESTCONF daemon runs as)
|
|
: ${WWWUSER:=www-data}
|
|
|
|
# Home dir for web user
|
|
: ${WWWDIR:=/www-data}
|
|
|
|
# Initiate clixon configuration (env variable)
|
|
echo "$CONFIG" > /usr/local/etc/clixon.xml
|
|
|
|
# Initiate running db (env variable)
|
|
echo "$STORE" > /usr/local/var/example/running_db
|
|
|
|
# This is a clixon site test file.
|
|
# Add to skiplist:
|
|
# - all 3rd party model testing (you need to download the repos)
|
|
# - test_install.sh since you dont have the make environment
|
|
cat <<EOF > /usr/local/bin/test/site.sh
|
|
# Add your local site specific env variables (or tests) here.
|
|
SKIPLIST="test_api.sh test_client.sh test_c++.sh test_install.sh test_privileges.sh"
|
|
RCPROTO=https
|
|
#IETFRFC=
|
|
EOF
|
|
|
|
# Workaround for this error output:
|
|
# sudo: setrlimit(RLIMIT_CORE): Operation not permitted
|
|
echo "Set disable_coredump false" > /etc/sudo.conf
|
|
|
|
chmod 775 /usr/local/bin/test/site.sh
|
|
|
|
# Generate self-signed server certificates
|
|
cat<<EOF > ./ca.cnf
|
|
[ ca ]
|
|
default_ca = CA_default
|
|
|
|
[ CA_default ]
|
|
serial = ca-serial
|
|
crl = ca-crl.pem
|
|
database = ca-database.txt
|
|
name_opt = CA_default
|
|
cert_opt = CA_default
|
|
default_crl_days = 9999
|
|
default_md = md5
|
|
|
|
[ req ]
|
|
default_bits = 2048
|
|
days = 1
|
|
distinguished_name = req_distinguished_name
|
|
attributes = req_attributes
|
|
prompt = no
|
|
output_password = password
|
|
|
|
[ req_distinguished_name ]
|
|
C = SE
|
|
L = Stockholm
|
|
O = Clixon
|
|
OU = clixon
|
|
CN = ca
|
|
emailAddress = olof@hagsand.se
|
|
|
|
[ req_attributes ]
|
|
challengePassword = test
|
|
EOF
|
|
|
|
# Generate self-signed server certificates
|
|
openssl req -x509 -config ./ca.cnf -nodes -newkey rsa:4096 -keyout /etc/ssl/private/clixon-server-key.pem -out /etc/ssl/certs/clixon-server-crt.pem -days 365
|
|
|
|
# Start clixon_restconf
|
|
# -s https
|
|
# But dont use -s exposing local ports since there is problem with self-signed certs?
|
|
${WWWDIR}/clixon_restconf -l f${WWWDIR}/restconf.log -D $DBG &
|
|
>&2 echo "clixon_restconf started"
|
|
|
|
# Start clixon backend (tests will kill this)
|
|
# Note if tests start too quickly, a backend may only be running and get error when start here,
|
|
# therefore test starts need to be delayed slightly
|
|
/usr/local/sbin/clixon_backend -D $DBG -s running -l e # logs on docker logs
|
|
>&2 echo "clixon_backend started"
|
|
|
|
# Alt: let backend be in foreground, but test scripts may
|
|
# want to restart backend
|
|
/bin/sleep 100000000
|