entrypoint.sh

#!/bin/sh

CERT_FILE=$1
KEY_FILE=$2
CHAIN_FILE=$3

ACC_HOME=/opt/acc
LOG=-loglevel=4

# Generate root-ca. The generated file are root-ca.pem and root-ca.key
cfssl genkey $LOG -initca ${ACC_HOME}/etc/ca-csr.json \
| cfssljson -bare ${ACC_HOME}/ca/root-ca


# Generate signing-ca. The generated file are signing-ca.pem, signing-ca.key and signing-ca.csr
cfssl gencert $LOG -ca ${ACC_HOME}/ca/root-ca.pem -ca-key ${ACC_HOME}/ca/root-ca-key.pem \
    -config="${ACC_HOME}/etc/signing-ca-cert-config.json" \
    -profile="intermediate" ${ACC_HOME}/etc/intermediate-csr.json | \
    cfssljson -bare ${ACC_HOME}/ca/signing-ca

# Generate server sertificate.
cfssl gencert $LOG -ca ${ACC_HOME}/ca/signing-ca.pem -ca-key ${ACC_HOME}/ca/signing-ca-key.pem \
    -config="${ACC_HOME}/etc/signing-ca-cert-config.json" \
    -profile="server" ${ACC_HOME}/etc/server-csr.json | \
    cfssljson -bare ${ACC_HOME}/out/host


# CA-cain
cat ${ACC_HOME}/ca/root-ca.pem ${ACC_HOME}/ca/signing-ca.pem > ${ACC_HOME}/out/${CHAIN_FILE}
mv ${ACC_HOME}/out/host.pem ${ACC_HOME}/out/${CERT_FILE}
mv ${ACC_HOME}/out/host-key.pem ${ACC_HOME}/out/${KEY_FILE}

if [ ! -z $GITHUB_WORKSPACE ]
then
  cp -p ${ACC_HOME}/out/${CERT_FILE} ${ACC_HOME}/out/${KEY_FILE} ${ACC_HOME}/out/${CHAIN_FILE} $GITHUB_WORKSPACE
fi