Cockpit certificate

apply-cockpit-certificate.sh

### This is a little script to help me install / rotate Cockpit certificates

#!/bin/bash
CERT_PKCS7=$(hostname -f).pkcs7
CERT_PEM=$(hostname -f).pem
KEY=$(hostname -f).key
DEST=/etc/cockpit/ws-certs.d/$(hostname -f).cert


[ -f $CERT_PKCS7 ] || echo "Certificate file not found: $CERT_PKCS7"
[ -f $KEY ]  || echo "Private key file not found: $KEY"


# Convert the PKCS7 data into PEM format
openssl pkcs7 -print_certs -in $CERT_PKCS7 -out $CERT_PEM

# Remove garbage from the PEM file and add the private key to the file so Cockpit can use it
grep -v -e '^$' -e '^subject' -e '^issuer' < $CERT_PEM > $DEST
cat $KEY >> $DEST


# Restart Cockpit
systemctl restart cockpit.service

create-cockpit-certificate-signing-request.sh

### This command generates a Certificate Signing Request (CSR) and accompanying private key

openssl req -newkey rsa:4096 -nodes \
  -subj "/CN=$(hostname -f)" \
  -addext "subjectAltName=DNS:$(hostname -f)" \
  -keyout $(hostname -f).key \
  -out $(hostname -f).csr