lennisthemenace / atak-certs Goto Github PK

Add the ability to run with --headless flag to create a default set of certs for the server

This should prove useful to the FTS project if they choose to integrate it into the installation process

One "nice to have" would be a flag where the script automatically copies the certs to the FTS {userpath}{python_version}/dist-packages/FreeTAKServer/Certs/, with filenames identical to the ones indicated on tsame configuration file... pubserver.key, pubserver.pem, pubserver.key.unencrypted and ca.pem. So end-users won't have to dabble much on the MainConfig.py that much.

Yes, the script will run as root.

Following along the instructions, I found requests is required. Might just want to put that in Step 2

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 23135  100 23135    0     0  72751      0 --:--:-- --:--:-- --:--:-- 72751
Traceback (most recent call last):
  File "<stdin>", line 26, in <module>
ModuleNotFoundError: No module named 'requests'

Running on CentOS 7, default Python 3.6.8. Understandable if you don't want to support a version that old, but might be useful to state what the min version supported is

[root@localhost tak]$ curl -L https://git.io/JL9DP | sudo python3 -
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 23135  100 23135    0     0  80891      0 --:--:-- --:--:-- --:--:-- 80891
Cannot find CA locally so generating one
CA key Stored Here: ./ca.key
CA pem Stored Here: ./ca.pem
Would you like to generate a server certificate? y/n Traceback (most recent call last):
  File "<stdin>", line 484, in <module>
EOFError: EOF when reading a line

Currently FTS does not validate the cert used by ATAK as the user cert is actually a user cert, it will take another signed server cert. but the user cert option should create the necessary extensions to denote a user certificate.