post-processing-idrac.sh

#!/bin/bash

# Script to place on the Cert Warden server (e.g. ./data/scripts/this_script.sh) to then use as a post
# processing script to install certificate onto a Dell iDRAC

# Note: Only RSA keys seem to be supported on iDRAC.

# Required additional binary:
# goracadm-amd64-linux -- see: https://github.com/gregtwallace/goracadm

# Required additional environment variables (in Cert Warden post processing setup):
# IDRAC_HOST - hostname or IP of the idrac (strongly prefer hostname for security)
# IDRAC_USER - username to login to the idrac
# IDRAC_PASSWORD - password for the above username to login to the idrac

# Note: Strict HTTPS verification is enabled below. Ensure the IDRAC already has a valid cert
# and the hostname matches (aka manually load the key and cert the first time you install a 
# valid one on the iDRAC). OR disable strict below (not recommended).

#######

# stop / fail on any error
set -e

# CD working dir to script location
cd "${0%/*}"

# go racadm binary (https://github.com/gregtwallace/goracadm)
# ver >= 0.1.4
racadm_cmd=./goracadm-amd64-linux
# racadm strict mode flag ("-S " for strict, "" for insecure)
strict_mode="-S "

## Script
# no need to compare anything -- if this file runs it is due to a new certificate

# Install new key and cert and reset
$racadm_cmd ${strict_mode}-r "$(printenv IDRAC_HOST)" -u "$(printenv IDRAC_USER)" -p "$(printenv IDRAC_PASSWORD)" sslkeyupload -t 1 -f "$(printenv CW_PRIVATE_KEY_PEM)"
$racadm_cmd ${strict_mode}-r "$(printenv IDRAC_HOST)" -u "$(printenv IDRAC_USER)" -p "$(printenv IDRAC_PASSWORD)" sslcertupload -t 1 -f "$(printenv CW_CERTIFICATE_PEM)"
$racadm_cmd ${strict_mode}-r "$(printenv IDRAC_HOST)" -u "$(printenv IDRAC_USER)" -p "$(printenv IDRAC_PASSWORD)" racreset