Regenerate expired SSL certificate for the iCSP Web Console Certificate via Shell Script

Products

• Industrial Control System Protection

Issue/Introduction

Although ICSP provides command to regenerate expired SSL certificate for Web Console, it is a tedious task to regenerate SSL certificate on huge number of ICSP Scanner Devices

Environment

Industrial Control System Protection Neural (iCSP Neural) 6.x

Resolution

The shell script that is attached to this document will allow you to regenerate expired SSL certificate for ICSP Web Console

Details: Attached archive contains 3 files – executer.sh, remote_ssl.sh and scanner_list

scanner_list – contains the details of scanners in a comma separated list for each scanner device, one per line
                        IP Address, admin password, hostname . E.g. 10.10.0.1,pass@123,neural-123456

executer.sh – This is main script which will invoke remote_ssl.sh for each scanner

remote_ssl.sh – This script will accept IP Address, admin password and hostname and will execute regenerate SSL certificate for Web Console

How to Execute
1. Unzip the attached archive in a folder.
2. Add all the scanner details in scanner_list file as mentioned in details above 
3. Run executer.sh file
 $ unzip Remote_SSL_executer.zip
 $ chmod 755 executer.sh
 $ vi scanner_list <<< add scanner details
 $ ./executer.sh

Pre-requisites –
Linux or Mac system with bash shell and ‘expect’ installed.