voltron/NodeMgmt
1
1
Fork 0
Code Issues Pull Requests Releases 1 Activity

Update nodemgmt-scripts.sh

Browse Source
This commit is contained in:
David Schroeder
2022-11-07 13:03:55 -06:00
parent cd8a0fbd86
commit ee38d61539
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
nodemgmt-scripts.sh
View File

@@ -1936,8 +1936,9 @@ NODEUPDATE() {
VCENTER-SSL(){ VCENTER-SSL(){
VCHOSTNAME='vcenter.scity.us' VCHOSTNAME='vcenter.scity.us'
#CERTDIR="/etc/letsencrypt/live/${VCHOSTNAME}" #BASECERTDIR="/etc/letsencrypt/live"
CERTDIR="/opt/nginx-proxy/ssl/${VCHOSTNAME}" BASECERTDIR="/opt/nginx-proxy/ssl"
CERTDIR="${BASECERTDIR}/${VCHOSTNAME}"
SERVER="https://${VCHOSTNAME}" SERVER="https://${VCHOSTNAME}"
CRED="administrator@scity.vs:$(pass iDSVC)" CRED="administrator@scity.vs:$(pass iDSVC)"
@@ -1958,9 +1959,16 @@ VCENTER-SSL(){
fi fi
echo -en "${idsCL[LightCyan]}Updating certificate on vCenter... ${idsCL[Default]}" echo -en "${idsCL[LightCyan]}Updating certificate on vCenter... ${idsCL[Default]}"
rm -f $CERTDIR/fullcert.pem
cat $CERTDIR/cert.pem > $CERTDIR/fullcert.pem
cat $CERTDIR/chain.pem >> $CERTDIR/fullcert.pem
cat $BASECERTDIR/isrgrootx1.pem >> $CERTDIR/fullcert.pem
SESSION_ID=$(curl -s -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' --header 'vmware-use-header-authn: test' --header 'vmware-api-session-id: null' -u $CRED "$SERVER/rest/com/vmware/cis/session" --insecure | python3 -c "import sys, json; print(json.load(sys.stdin)['value'])") SESSION_ID=$(curl -s -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' --header 'vmware-use-header-authn: test' --header 'vmware-api-session-id: null' -u $CRED "$SERVER/rest/com/vmware/cis/session" --insecure | python3 -c "import sys, json; print(json.load(sys.stdin)['value'])")
PRIVKEY=$(awk -v ORS='\\n' '1' "$CERTDIR/privkey.pem") PRIVKEY=$(awk -v ORS='\\n' '1' "$CERTDIR/privkey.pem")
CERT=$(awk -v ORS='\\n' '1' "$CERTDIR/cert.pem") CERT=$(awk -v ORS='\\n' '1' "$CERTDIR/fullcert.pem")
REQUEST_BODY="{ \"spec\" : { \"cert\" : \"$CERT\", \"key\" : \"$PRIVKEY\" } }" REQUEST_BODY="{ \"spec\" : { \"cert\" : \"$CERT\", \"key\" : \"$PRIVKEY\" } }"
curl --insecure -X PUT "$SERVER/rest/vcenter/certificate-management/vcenter/tls" \ curl --insecure -X PUT "$SERVER/rest/vcenter/certificate-management/vcenter/tls" \
-H "vmware-api-session-id: $SESSION_ID" \ -H "vmware-api-session-id: $SESSION_ID" \