cert_replace/cert_replace.sh

#!/bin/bash
#Cert replacement script

orig_cert_loc=/etc/pki/tls/certs/6628673501320294007.crt
orig_key_loc=/etc/pki/tls/private/6628673501320294007.key
orig_mellon_file1=/etc/httpd/mellon/monitoring-rp_idp_metadata.xml
orig_mellon_file2=/etc/httpd/mellon/monitoring-rp_sp.xml
new_cert_loc=/home/recovery/csiwildcard2022.crt
new_key_loc=/home/recovery/csiltd2022.key.new
new_mellon_file1=/home/recovery/monitoring-rp_idp_metadata.xml.new
new_mellon_file2=/home/recovery/monitoring-rp_sp.xml.new

timestamp=$(date +%Y%m%d-%k%M%S)


if [ "$EUID" -ne 0 ]
  then echo "Please run as root"
     exit
fi

echo "Backing up old keys and certificate"

cp $orig_cert_loc $orig_cert_loc.$timestamp
echo "Saved "$orig_cert_loc" to "$orig_cert_loc.$timestamp

cp $orig_key_loc $orig_key_loc.$timestamp
echo "Saved "$orig_cert_loc" to "$orig_cert_loc.$timestamp

echo "Putting new Keys/certs in place"
cp -f $new_cert_loc $orig_cert_loc
chmod 644 $orig_cert_loc
cp -f $new_key_loc $orig_key_loc
chmod 600 $orig_key_loc

echo Apache keys/cert updated
echo  "Do you want to restart Apache (Y/N)"
read reply
answer=$(echo $reply|tr "[:lower:]" "[:upper:]")

if [ $answer = 'Y' ] || [ $answer = 'YES' ]
        then systemctl restart httpd
                if [ $? <> 0 ]
                        then echo 'Error restarting Apache please investigate'
                         #exit
                fi
else
        exit
fi

echo "Backing up and applying mod_auth_merllon changes"


cp $orig_cert_loc $orig_cert_loc.$timestamp
echo "Saved "$orig_mellon_file1" to "$orig_mellon_file1.$timestamp

cp $orig_mellon_file1 $orig_mellon_file1.$timestamp
echo "Saved "$orig_mellon_file2" to "$orig_mellon_file2.$timestamp

echo "Putting new Keys/certs in place"
cp -f $new_mellon_file1 $orig_mellon_file1
chmod 644 $orig_mellon_file1
cp -f $new_mellon_file2 $orig_mellon_file2
chmod 644 $orig_mellon_file2

echo "mod_auth_merllon files updated"
echo  "Do you want to restart Apache (Y/N) (Only do this once Wintel have replaced the cert in Pingfederate)"
read reply
answer=$(echo $reply|tr "[:lower:]" "[:upper:]")

if [ $answer = 'Y' ] || [ $answer = 'YES' ]
        then systemctl restart httpd
                if [ $? <> 0 ]
                        then echo 'Error restarting Apache please investigate'
                        #exit
                fi
else
        exit
fi