Merge fa9b22884f into ac0cdcf70b

deploy/rdp.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env sh
+
+#Here is a script to deploy cert to rdp server.
+
+#returns 0 means success, otherwise error.
+
+########  Public functions #####################
+
+#domain keyfile certfile cafile fullchain
+rdp_deploy() {
+  _cdomain="$1"
+  _ckey="$2"
+  _ccert="$3"
+  _cca="$4"
+  _cfullchain="$5"
+
+  _debug _cdomain "$_cdomain"
+  _debug _ckey "$_ckey"
+  _debug _ccert "$_ccert"
+  _debug _cca "$_cca"
+  _debug _cfullchain "$_cfullchain"
+  
+  openssl pkcs12 -export -out "$DOMAIN_PATH/$_cdomain.pfx" -in "$_ccert" -inkey "$_ckey" -passout pass:
+  
+  THUMBPRINT=$(powershell "(Import-PfxCertificate -FilePath \"$(cygpath -w "$DOMAIN_PATH/$_cdomain.pfx")\" -CertStoreLocation Cert:\LocalMachine\My).thumbprint")
+  
+  wmic /namespace:\\\\root\\cimv2\\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash=$THUMBPRINT
+
+}