1 files changed, 77 insertions, 0 deletions
diff --git a/cpp/demo/IceGrid/secure/makecerts.py b/cpp/demo/IceGrid/secure/makecerts.py
new file mode 100755
index 00000000000..f7c13c4ecac
--- /dev/null
+++ b/cpp/demo/IceGrid/secure/makecerts.py
@@ -0,0 +1,77 @@
+#!/usr/bin/env python
+# **********************************************************************
+#
+# Copyright (c) 2003-2008 ZeroC, Inc. All rights reserved.
+#
+# This copy of Ice is licensed to you under the terms described in the
+# ICE_LICENSE file included in this distribution.
+#
+# **********************************************************************
+
+import os, sys, shutil, glob
+
+def iceca(args):
+
+    if(os.environ.has_key("ICE_HOME")):
+        cmd = os.path.join(os.environ["ICE_HOME"], "bin", "iceca") + " " + args
+    else:
+        cmd = "iceca " + args
+
+    if os.system(cmd):
+        sys.exit(1)
+
+def createCertificate(type, filename = None):
+
+    if not filename:
+        filename = type
+
+    print "======= Creating " + filename + " certificate ======="
+
+    # Generate the certificate in a temporary directory
+    os.mkdir("tmpcerts")
+    os.chdir("tmpcerts")
+    iceca("request --" + type + nopassword)
+    iceca("sign --in " + type + "_req.pem --out " + type + "_cert.pem")
+    os.chdir("..")
+
+    # Move and rename the generated certificate
+    os.rename(os.path.join("tmpcerts", type + "_key.pem"), filename + "_key.pem")
+    os.rename(os.path.join("tmpcerts", type + "_cert.pem"), filename + "_cert.pem")
+    
+    # Remove the temporary directory
+    os.remove(os.path.join("tmpcerts", type + "_req.pem"))
+    os.rmdir("tmpcerts")
+
+    print
+    print
+
+cwd = os.getcwd()
+
+if not os.path.exists("certs") or os.path.basename(cwd) != "secure":
+    print "You must run this script from the secure demo directory"
+    sys.exit(1)
+
+os.environ["ICE_CA_HOME"] = os.path.abspath("certs")
+nopassword = " --no-password"
+
+os.chdir("certs")
+
+#
+# First, create the certificate authority.
+#
+print "======= Creating Certificate Authority ======="
+iceca("init --overwrite" + nopassword)
+print
+print
+
+createCertificate("registry")
+createCertificate("node")
+createCertificate("server", "glacier2")
+createCertificate("server")
+createCertificate("server", "admin")
+
+print "======= Creating Java Key Store ======="
+
+iceca("import --java admin admin_cert.pem admin_key.pem certs.jks")
+
+os.chdir("..")