eucaconsole.init

#!/bin/sh

### BEGIN INIT INFO
# Provides:          eucaconsole
# Required-Start:    $network $remote_fs
# Required-Stop:     $network $remote_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Eucalyptus Console Server
# Description:       Eucalyptus Console Server
### END INIT INFO

. /etc/rc.d/init.d/functions

[ -f /etc/sysconfig/eucaconsole ] && . /etc/sysconfig/eucaconsole

SERVICE=eucaconsole
PROCESS=eucaconsole
PIDFILE=/var/run/eucaconsole/eucaconsole.pid
CONSOLEUSER=eucaconsole

LOCKFILE=/var/lock/subsys/eucaconsole

start() {
    if [ "x${GENERATE_CERT}" != "xNO" ]; then
        generate_cert
    fi

    if ! [ -f /etc/eucaconsole/session-keys.ini ]; then
        generate_cookie_secrets
    fi    

    echo -n $"Starting $SERVICE: "
    daemon --user=$CONSOLEUSER --pidfile=$PIDFILE $PROCESS -d -p $PIDFILE
    RETVAL=$?
    echo
    [ $RETVAL -eq 0 ] && touch $LOCKFILE
    return $RETVAL
}

stop() {
    echo -n $"Stopping $SERVICE: "
    killproc -p $PIDFILE $PROCESS
    RETVAL=$?
    echo
    [ $RETVAL -eq 0 ] && rm -f $LOCKFILE
    [ -f $PIDFILE ] && rm -f $PIDFILE
}

restart() {
    stop
    start
}

condrestart() {
    if [ -e $LOCKFILE ] ; then
        restart
        RETVAL=$?
        return $RETVAL
    fi
    RETVAL=0
    return $RETVAL
}

generate_cookie_secrets(){
    cat > /etc/eucaconsole/session-keys.ini << _EOF_
[general]
session.encrypt_key = $(dd if=/dev/urandom bs=24 count=1 status=none | base64 | tr -d '/+=')
session.validate_key = $(dd if=/dev/urandom bs=24 count=1 status=none | base64 | tr -d '/+=')
_EOF_
}

generate_cert() {
    local key=/etc/eucaconsole/console.key
    local cert=/etc/eucaconsole/console.crt

    if [ -f $key ] && [ -f $cert ]; then
        return 1
    fi

    echo -n $"Generating self-signed certificate: "
    rm -f $key $cert

    local csr=`mktemp`
    local cn=

    if nslookup `hostname` &>/dev/null; then
        cn=$(nslookup `hostname` 2>&1 | tail -3 | grep Name | sed -e 's@^Name:\s*@@')
    else
        cn=`hostname`
    fi

    local country=US
    local state=CA
    local location="Santa Barbara"
    local org="Eucalyptus Systems, Inc."
    local unit="Eucalyptus User Console"

    if ! openssl genpkey -algorithm rsa -pkeyopt rsa_keygen_bits:2048 -out $key &>/dev/null; then
        rm -f $csr
        failure $"Generating RSA key"
        echo
        exit 1
    fi

    openssl req -new -key $key -sha512 -out $csr &>/dev/null <<EOF
$country
$state
$location
$org
$unit
$cn
$USER@$cn


EOF

    if [ $? -ne 0 ]; then
        rm -f $key $csr
        failure $"Generating certificate request"
        echo
        exit 1
    fi

    if ! openssl x509 -req -in $csr -signkey $key -days 365 -sha512 -out $cert &>/dev/null; then
        rm -f $key $csr
        failure $"Generating certificate"
        echo
        exit 1
    fi

    rm -f $csr

    chmod 600 $cert
    chown $CONSOLEUSER:$CONSOLEUSER $cert

    chmod 600 $key
    chown $CONSOLEUSER:$CONSOLEUSER $key

    success $"Generating certificate"
    echo
}


# See how we were called.
case "$1" in
    start)
        start
        RETVAL=$?
        ;;
    stop)
        stop
        RETVAL=$?
        ;;
    status)
        status -p $PIDFILE $PROCESS
        RETVAL=$?
        ;;
    restart)
        restart
        RETVAL=$?
        ;;
    condrestart)
        condrestart
        RETVAL=$?
        ;;
    *)
        echo $"Usage: $0 {start|stop|restart|condrestart|status}"
        RETVAL=2
esac
exit $RETVAL