smishchuk/spec
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

initial draft

Browse Source
This commit is contained in:
msyu
2025-06-02 16:16:51 +03:00
commit 529334d03b
272 changed files with 22684 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
saml/cmd/1.txt
View File
saml/cmd/LUCEE_SAML.pem
View File
saml/cmd/delcert.cmd
+2
View File
@@ -0,0 +1,2 @@
D:\lucee\jre\bin\keytool.exe -delete -v -alias OFFICE02_SAML -keystore D:\lucee\tomcat\lucee-server\context\security\cacerts -storepass changeit
pause
saml/cmd/delcert.cmd.txt
+2
View File
@@ -0,0 +1,2 @@
D:\lucee\jre\bin\keytool.exe -delete -v -alias LUCEE_SAML -keystore D:\lucee\jre\lib\security\cacerts -storepass changeit
pause
saml/cmd/delcert.txt
+2
View File
@@ -0,0 +1,2 @@
D:\railo\jre\bin\keytool.exe -delete -v -alias OFFICE02_SAML -keystore D:\railo\jre\lib\security\cacerts -storepass changeit
pause
saml/cmd/import.cmd
+23
View File
@@ -0,0 +1,23 @@
REM maybe should run as admin
cd /D "%~dp0"
SET keytool=D:\lucee\jre\bin\keytool.exe
SET keystore=D:\lucee\tomcat\lucee-server\context\security\cacerts
REM SET dname=CN=office02.ad.nubes.ru SAML key pair, OU=office02.ad.nubes.ru, O=NUBES, L=Moscow, C=RU
SET alias=OFFICE02_SAML
SET passwd=changeit
%keytool% -importkeystore ^
-deststorepass %passwd% -destkeypass %passwd% -destkeystore %keystore% ^
-srckeystore office02.ad.nubes.ru.pfx -srcstoretype PKCS12 -srcstorepass ZbUswE9T ^
-srcalias "te-webserver2k-6c5a79ec-75b1-403e-8a44-31f694e74ea3" -destalias OFFICE02_SAML
pause
%keytool% -list ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore% ^
-alias %alias% ^
-v
pause
saml/cmd/keystore.p12
BIN
View File
Binary file not shown.
saml/cmd/lscert.cmd
+2
View File
@@ -0,0 +1,2 @@
D:\lucee\jre\bin\keytool.exe -list -keystore D:/lucee/tomcat/lucee-server/context/security/cacerts -storepass changeit
pause
saml/cmd/lscert.cmd.txt
+2
View File
@@ -0,0 +1,2 @@
D:\lucee\jre\bin\keytool.exe -list -v -keystore D:/lucee/tomcat/lucee-server/context/security/cacerts -storepass changeit
pause
saml/cmd/lscert.txt
+2
View File
@@ -0,0 +1,2 @@
"%JAVA_HOME%\bin\keytool.exe" -list -v -keystore C:\lucee\tomcat\lucee-server\context\security\cacerts -storepass changeit
pause
saml/cmd/mkcert.cmd
+62
View File
@@ -0,0 +1,62 @@
REM maybe should run as admin
cd /D "%~dp0"
SET keytool="%JAVA_HOME%\bin\keytool.exe"
SET keystore=D:/lucee/tomcat/lucee-server/context/security/cacerts
SET dname=CN=dat-n-smishch1 SSL key pair, OU=dat-n-smishch1, O=NUBES, L=Moscow, C=RU
SET alias=LUCEE_SAML
SET passwd=changeit
REM it is important for Lucee to see cert
REM SET keytool=D:\railo\jdk\bin\keytool.exe
REM SET keystore=D:\railo\lib\railo-server\context\security\cacerts
REM SET dname=CN=office02 SAML key pair, OU=offiec02, O=NUBES, L=Moscow, C=RU
REM SET alias=OFFICE02_SAML
REM generate cert + key
%keytool% -v -genkeypair ^
-dname "%dname%" ^
-alias %alias% ^
-keyalg RSA ^
-keysize 2048 ^
-validity 3653 ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore%
pause
%keytool% -list ^
-alias %alias% ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore% ^
-v
pause
%cd%
REM export cert + key to p12 keystore
%keytool% -importkeystore ^
-alias %alias% ^
-srckeystore %keystore% ^
-destkeystore keystore.p12 ^
-deststoretype PKCS12 ^
-srckeypass %passwd% ^
-srcstorepass %passwd% ^
-deststorepass %passwd% ^
-destkeypass %passwd%
pause
:export
REM U should convert .p12 keystore to .pem format for sending your cert and key to adfs administrator, 'openssl pkcs12 -in keystore.p12 -out saml.pem'
%keytool% -exportcert ^
-alias %alias% ^
-keypass %passwd% ^
-keystore %keystore% ^
-storepass %passwd% ^
-rfc ^
-file LUCEE_SAML.pem
pause
saml/cmd/mkcert.cmd.txt
+62
View File
@@ -0,0 +1,62 @@
REM maybe should run as admin
cd /D "%~dp0"
SET keytool="%JAVA_HOME%\bin\keytool.exe"
SET keystore=C:/lucee/tomcat/lucee-server/context/security/cacerts
SET dname=CN=dat-n-smishch1 SAML key pair, OU=dat-n-smishch1, O=NUBES, L=Moscow, C=RU
SET alias=LUCEE_SAML
SET passwd=changeit
REM it is important for Lucee to see cert
REM SET keytool=D:\railo\jdk\bin\keytool.exe
REM SET keystore=D:\railo\lib\railo-server\context\security\cacerts
REM SET dname=CN=office02 SAML key pair, OU=offiec02, O=NUBES, L=Moscow, C=RU
REM SET alias=OFFICE02_SAML
goto export
REM generate cert + key
%keytool% -v -genkeypair ^
-dname "%dname%" ^
-alias %alias% ^
-keyalg RSA ^
-keysize 2048 ^
-validity 3653 ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore%
pause
%keytool% -list ^
-alias %alias% ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore% ^
-v
pause
%cd%
REM export cert + key to p12 keystore
%keytool% -importkeystore ^
-alias %alias% ^
-srckeystore %keystore% ^
-destkeystore keystore.p12 ^
-deststoretype PKCS12 ^
-srckeypass %passwd% ^
-srcstorepass %passwd% ^
-deststorepass %passwd% ^
-destkeypass %passwd%
pause
:export
REM U should convert .p12 keystore to .pem format for sending your cert and key to adfs administrator, 'openssl pkcs12 -in keystore.p12 -out saml.pem'
%keytool% -exportcert ^
-alias %alias% ^
-keypass %passwd% ^
-keystore %keystore% ^
-storepass %passwd% ^
-rfc ^
-file LUCEE_SAML.pem
pause
saml/cmd/mkcert.txt
+47
View File
@@ -0,0 +1,47 @@
REM maybe should run as admin
CD /d .
SET keytool="%JAVA_HOME%\bin\keytool.exe"
SET keystore=C:/lucee/tomcat/lucee-server/context/security/cacerts
SET dname=CN=dat-n-smishch1 SAML key pair, OU=dat-n-smishch1, O=NUBES, L=Moscow, C=RU
SET alias=LUCEE_SAML
SET passwd=changeit
REM SET keytool=D:\railo\jdk\bin\keytool.exe
REM SET keystore=D:\railo\lib\railo-server\context\security\cacerts
REM SET dname=CN=office02 SAML key pair, OU=offiec02, O=NUBES, L=Moscow, C=RU
REM SET alias=OFFICE02_SAML
REM generate cert + key
%keytool% -v -genkeypair ^
-dname "%dname%" ^
-alias %alias% ^
-keyalg RSA ^
-keysize 2048 ^
-validity 3653 ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore%
pause
%keytool% -v -list ^
-alias %alias% ^
-keypass %passwd% ^
-storepass %passwd% ^
-keystore %keystore%
pause
REM export cert + key to p12 keystore
%keytool% -importkeystore ^
-alias %alias% ^
-srckeystore %keystore% ^
-destkeystore keystore.p12 ^
-deststoretype PKCS12 ^
-srckeypass %passwd% ^
-srcstorepass %passwd% ^
-deststorepass %passwd% ^
-destkeypass %passwd%
pause
REM U should convert .p12 keystore to .pem format for sending your cert and key to adfs administrator, 'openssl pkcs12 -in keystore.p12 -out saml.pem'
saml/cmd/office02.ad.nubes.ru.pfx
BIN
View File
Binary file not shown.
saml/cmd/temp.keystore
BIN
View File
Binary file not shown.
saml/cmd/viewsrc.cmd
+6
View File
@@ -0,0 +1,6 @@
D:\lucee\jre\bin\keytool.exe -importkeystore ^
-deststorepass changeit -destkeypass changeit -destkeystore temp.keystore ^
-srckeystore office02.ad.nubes.ru.pfx -srcstoretype PKCS12 -srcstorepass ZbUswE9T
pause
D:\lucee\jre\bin\keytool.exe -list -keystore temp.keystore -storepass changeit -v
pause