Add 'cert_replace.sh'

cert_replace.sh

@@ -0,0 +1,78 @@
+#!/bin/bash
+#Cert replacement script
+
+orig_cert_loc=/etc/pki/tls/certs/6628673501320294007.crt
+orig_key_loc=/etc/pki/tls/private/6628673501320294007.key
+orig_mellon_file1=/etc/httpd/mellon/monitoring-rp_idp_metadata.xml
+orig_mellon_file2=/etc/httpd/mellon/monitoring-rp_sp.xml
+new_cert_loc=/home/recovery/csiwildcard2022.crt
+new_key_loc=/home/recovery/csiltd2022.key.new
+new_mellon_file1=/home/recovery/monitoring-rp_idp_metadata.xml.new
+new_mellon_file2=/home/recovery/monitoring-rp_sp.xml.new
+
+timestamp=$(date +%Y%m%d-%k%M%S)
+
+
+if [ "$EUID" -ne 0 ]
+  then echo "Please run as root"
+     exit
+fi
+
+echo "Backing up old keys and certificate"
+
+cp $orig_cert_loc $orig_cert_loc.$timestamp
+echo "Saved "$orig_cert_loc" to "$orig_cert_loc.$timestamp
+
+cp $orig_key_loc $orig_key_loc.$timestamp
+echo "Saved "$orig_cert_loc" to "$orig_cert_loc.$timestamp
+
+echo "Putting new Keys/certs in place"
+cp -f $new_cert_loc $orig_cert_loc
+chmod 644 $orig_cert_loc
+cp -f $new_key_loc $orig_key_loc
+chmod 600 $orig_key_loc
+
+echo Apache keys/cert updated
+echo  "Do you want to restart Apache (Y/N)"
+read reply
+answer=$(echo $reply|tr "[:lower:]" "[:upper:]")
+
+if [ $answer = 'Y' ] || [ $answer = 'YES' ]
+        then systemctl restart httpd
+                if [ $? <> 0 ]
+                        then echo 'Error restarting Apache please investigate'
+                         #exit
+                fi
+else
+        exit
+fi
+
+echo "Backing up and applying mod_auth_merllon changes"
+
+
+cp $orig_cert_loc $orig_cert_loc.$timestamp
+echo "Saved "$orig_mellon_file1" to "$orig_mellon_file1.$timestamp
+
+cp $orig_mellon_file1 $orig_mellon_file1.$timestamp
+echo "Saved "$orig_mellon_file2" to "$orig_mellon_file2.$timestamp
+
+echo "Putting new Keys/certs in place"
+cp -f $new_mellon_file1 $orig_mellon_file1
+chmod 644 $orig_mellon_file1
+cp -f $new_mellon_file2 $orig_mellon_file2
+chmod 644 $orig_mellon_file2
+
+echo "mod_auth_merllon files updated"
+echo  "Do you want to restart Apache (Y/N) (Only do this once Wintel have replaced the cert in Pingfederate)"
+read reply
+answer=$(echo $reply|tr "[:lower:]" "[:upper:]")
+
+if [ $answer = 'Y' ] || [ $answer = 'YES' ]
+        then systemctl restart httpd
+                if [ $? <> 0 ]
+                        then echo 'Error restarting Apache please investigate'
+                        #exit
+                fi
+else
+        exit
+fi