Generate XMR Pool Certificates
Quickly spin up a set of brand new certificates for the XMR Pool Project project certificates with the new-xmr-certs.sh script.
Usage
Run on the production CA:
cd /desired/parent/directory
/opt/bmca/scripts/new-xmr-certs.sh
Output is 17 New Certificates
The script generates 17 certificate/key pairs in ./new-certs:
- Web, admin, and cluster names use web-server.
- Database names use mariadb-server.
- Every certificate uses
--environment prod. - Default password files are
/root/.bmcaand/root/.bmca-leaf.
The output directory must not already exist. Static and CLI tests pass.
XMR Pool Project DNS
The certificates that are generated are based on the output of the XMR Pool Project dns-report.sh script. An example invocation is shown below:
scripts/dns-report.sh
Environment Service DNS name Resolves to
---------------------------------------------------------------------------
DEV Web xmr-dev.osoyalce.com sally.osoyalce.com
DEV Admin xmr-admin-dev.osoyalce.com sally.osoyalce.com
DEV DB server xmr-db-dev.osoyalce.com sally.osoyalce.com
QA Cluster xmr-qa.osoyalce.com xmr1-qa.osoyalce.com
QA Web xmr1-qa.osoyalce.com islands.osoyalce.com
QA Admin xmr-admin1-qa.osoyalce.com islands.osoyalce.com
QA DB server xmr-db1-qa.osoyalce.com islands.osoyalce.com
QA Web xmr2-qa.osoyalce.com kermit.osoyalce.com
QA Admin xmr-admin2-qa.osoyalce.com kermit.osoyalce.com
QA DB server xmr-db2-qa.osoyalce.com kermit.osoyalce.com
PROD Cluster xmr.osoyalce.com xmr1.osoyalce.com
PROD Web xmr1.osoyalce.com bama.osoyalce.com
PROD Admin xmr-admin1.osoyalce.com bama.osoyalce.com
PROD DB server xmr-db1.osoyalce.com bama.osoyalce.com
PROD Web xmr2.osoyalce.com wintermute.osoyalce.com
PROD Admin xmr-admin2.osoyalce.com wintermute.osoyalce.com
PROD DB server xmr-db2.osoyalce.com wintermute.osoyalce.com