1 files changed, 61 insertions, 0 deletions
diff --git a/cpp/demo/IceGrid/secure/makecerts.py b/cpp/demo/IceGrid/secure/makecerts.py
new file mode 100755
index 00000000000..2f95d04dbfe
--- /dev/null
+++ b/cpp/demo/IceGrid/secure/makecerts.py
@@ -0,0 +1,61 @@
+#!/usr/bin/env python
+# **********************************************************************
+#
+# Copyright (c) 2003-2011 ZeroC, Inc. All rights reserved.
+#
+# This copy of Ice is licensed to you under the terms described in the
+# ICE_LICENSE file included in this distribution.
+#
+# **********************************************************************
+
+import os, sys, shutil, glob
+
+def runIceca(args):
+    os.environ['PYTHONUNBUFFERED'] = '1'
+    command = 'iceca %s' % args
+    if os.system(command):
+        sys.exit(1)
+
+def createCertificate(filename, cn):
+
+    print "======= Creating " + filename + " certificate ======="
+
+    runIceca('request --no-password --overwrite "%s" "%s"' % (filename, cn))
+    runIceca("sign --in %s_req.pem --out %s_cert.pem" % (filename, filename))
+    os.remove("%s_req.pem" % filename)
+
+    print
+    print
+
+cwd = os.getcwd()
+if not os.path.exists("certs") or os.path.basename(cwd) != "secure":
+    print "You must run this script from the secure demo directory"
+    sys.exit(1)
+
+os.environ["ICE_CA_HOME"] = os.path.abspath("certs")
+
+os.chdir("certs")
+
+#
+# First, create the certificate authority.
+#
+print "======= Creating Certificate Authority ======="
+runIceca("init --overwrite --no-password")
+print
+print
+
+createCertificate("registry", "IceGrid Registry")
+createCertificate("node", "IceGrid Node")
+createCertificate("glacier2", "Glacier2")
+createCertificate("server", "Server")
+
+print "======= Creating Java Key Store ======="
+
+try:
+    os.remove("certs.jks")
+except OSError:
+    pass
+
+runIceca("import --key-pass password --store-pass password --java ca_cert ca/db/ca_cert.pem ca/db/ca_key.pem certs.jks")
+
+os.chdir("..")