Skip to content
This repository was archived by the owner on Oct 15, 2025. It is now read-only.

Commit cf2d3c7

Browse files
committed
fix encoding and update create-console-listener to latest version
1 parent e9de791 commit cf2d3c7

4 files changed

Lines changed: 11 additions & 8 deletions

File tree

DeepSecurity/Common/helpers/cfn-rh-sql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,3 +9,4 @@ yum -y install freetds-devel
99
pip install pymssql
1010
wget https://cf-deepsecurity.s3.amazonaws.com/96/v0.5/Scripts/create-DSM-SqlDB.py
1111
chmod 755 create-DSM-SqlDB.py
12+

DeepSecurity/Common/helpers/create-console-listener

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
## create listenter on elb
33
## createlistener <elb name> <elb fqdn> <dsm console port> <StackName> <firstelb>
44
if [ $5 -eq 1 ]; then
5-
openssl req -nodes -new -sha256 -newkey rsa:2048 -subj '/CN='$2'/O=Trend Micro/OU=Deep Security Manager' -keyout /etc/cfn/privatekey -out /etc/cfn/csr;
5+
openssl req -nodes -new -sha256 -newkey rsa:2048 -subj '/CN='DeepSecurityManager'/O=Trend Micro/OU=Deep Security Manager' -keyout /etc/cfn/privatekey -out /etc/cfn/csr;
66
openssl x509 -req -days 3650 -in /etc/cfn/csr -signkey /etc/cfn/privatekey -out /etc/cfn/certificatebody;
77
aws iam upload-server-certificate --server-certificate-name DeepSecurityElbCertificate-$4 --certificate-body file:///etc/cfn/certificatebody --private-key file:///etc/cfn/privatekey
88
fi
@@ -23,14 +23,14 @@ loop=1
2323

2424
until [ -n "$loadbalancercert" -a "$loadbalancercert" != " " ]
2525
do
26-
if [ $loop -eq 1 ]; then echo 'attempting to create listener'; else echo 'listener not yet created, retrying command'; fi
26+
if [ $loop -eq 1 ]; then echo 'attempting to create listener'; else echo 'listener not yet created, retrying command'; fi
2727
loop=$((loop+1))
2828
sleep 10
29-
aws elb create-load-balancer-listeners --load-balancer-name $1 --listeners Protocol=HTTPS,LoadBalancerPort=$3,InstanceProtocol=HTTPS,InstancePort=$3,SSLCertificateId=$certid
29+
aws elb create-load-balancer-listeners --load-balancer-name $1 --region $6 --listeners Protocol=HTTPS,LoadBalancerPort=$3,InstanceProtocol=HTTPS,InstancePort=$3,SSLCertificateId=$certid
3030
loadbalancercert=$(aws elb describe-load-balancers --load-balancer-name $1 --region $6 --query 'LoadBalancerDescriptions[*].ListenerDescriptions[*].Listener.[SSLCertificateId]' --output text | grep $certid)
3131
done
3232

3333
echo 'load balancer listener created'
3434

35-
aws elb create-load-balancer-policy --load-balancer-name $1 --policy-name DSMConsoleStickySessions --policy-type-name LBCookieStickinessPolicyType --policy-attributes AttributeName=CookieExpirationPeriod,AttributeValue=600
36-
aws elb set-load-balancer-policies-of-listener --load-balancer-name $1 --load-balancer-port 443 --policy-names DSMConsoleStickySessions
35+
aws elb create-load-balancer-policy --load-balancer-name $1 --policy-name DSMConsoleStickySessions --policy-type-name LBCookieStickinessPolicyType --region $6 --policy-attributes AttributeName=CookieExpirationPeriod,AttributeValue=600
36+
aws elb set-load-balancer-policies-of-listener --load-balancer-name $1 --load-balancer-port 443 --policy-names DSMConsoleStickySessions --region $6

DeepSecurity/Common/helpers/createCloudAccount

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,9 +42,9 @@ tempDSSID=$(curl -k -H "Content-Type: application/json" -X POST "https://$DSMURL
4242
echo "#####Looping through regions to create connectors"
4343
for region in "${REGIONS[@]}"
4444
do
45-
endpoint="${region}ep"
46-
echo "##### creating connector for $region region with endpoint ${!endpoint}"
47-
curl -ks -H "Content-Type: application/json" "Accept: application/json" -X POST "https://$DSMURL/rest/cloudaccounts" -d '{"createCloudAccountRequest":{"cloudAccountElement":{"accessKey":"'${accesskey}'","cloudRegion":"'${!region}'","cloudType":"AMAZON","name":"'$3'","secretKey":"'${secretkey}'","endpoint":"'${!endpoint}'","azureCertificate":"-"},"sessionId":"'$tempDSSID'"}}'
45+
endpoint="${region}ep"
46+
echo "##### creating connector for $region region with endpoint ${!endpoint}"
47+
curl -ks -H "Content-Type: application/json" "Accept: application/json" -X POST "https://$DSMURL/rest/cloudaccounts" -d '{"createCloudAccountRequest":{"cloudAccountElement":{"accessKey":"'${accesskey}'","cloudRegion":"'${!region}'","cloudType":"AMAZON","name":"'$3'","secretKey":"'${secretkey}'","endpoint":"'${!endpoint}'","azureCertificate":"-"},"sessionId":"'$tempDSSID'"}}'
4848
done
4949

5050
curl -k -X DELETE https://$DSMURL/rest/authentication/logout?sID=$tempDSSID
@@ -56,3 +56,4 @@ unset username
5656
unset password
5757

5858

59+

DeepSecurity/Common/helpers/set-lbSettings

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,3 +45,4 @@ curl -k -v -H "Content-Type: text/xml;charset=UTF-8" -H 'SOAPAction: "systemSett
4545
'</soapenv:Body>'\
4646
'</soapenv:Envelope'\>
4747

48+

0 commit comments

Comments
 (0)