50 lines
1.4 KiB
Bash
50 lines
1.4 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
# Generate oracle keys for EthSigner
|
||
|
|
# Oracle keys are used to sign transactions for oracle updates
|
||
|
|
|
||
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
|
|
source "$SCRIPT_DIR/../lib/init.sh"
|
||
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
||
|
|
KEYS_DIR="$PROJECT_ROOT/keys/oracle"
|
||
|
|
|
||
|
|
NUM_ORACLES=${1:-1}
|
||
|
|
PASSWORD_FILE="${2:-$PROJECT_ROOT/keys/.password}"
|
||
|
|
|
||
|
|
echo "Generating $NUM_ORACLES oracle keys..."
|
||
|
|
|
||
|
|
# Create password file if it doesn't exist
|
||
|
|
if [ ! -f "$PASSWORD_FILE" ]; then
|
||
|
|
mkdir -p "$(dirname "$PASSWORD_FILE")"
|
||
|
|
openssl rand -base64 32 > "$PASSWORD_FILE"
|
||
|
|
chmod 600 "$PASSWORD_FILE"
|
||
|
|
echo "Created password file: $PASSWORD_FILE"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Generate keys
|
||
|
|
for i in $(seq 1 $NUM_ORACLES); do
|
||
|
|
ORACLE_DIR="$KEYS_DIR/oracle-$i"
|
||
|
|
mkdir -p "$ORACLE_DIR"
|
||
|
|
|
||
|
|
# Generate private key
|
||
|
|
PRIVATE_KEY=$(openssl rand -hex 32)
|
||
|
|
echo "$PRIVATE_KEY" > "$ORACLE_DIR/key.priv"
|
||
|
|
chmod 600 "$ORACLE_DIR/key.priv"
|
||
|
|
|
||
|
|
# Create keystore for EthSigner
|
||
|
|
if command -v ethsigner &> /dev/null; then
|
||
|
|
ethsigner --data-path="$ORACLE_DIR" \
|
||
|
|
account import --private-key-file="$ORACLE_DIR/key.priv" \
|
||
|
|
--password-file="$PASSWORD_FILE" 2>/dev/null || true
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "Generated oracle $i key: $ORACLE_DIR/key.priv"
|
||
|
|
done
|
||
|
|
|
||
|
|
echo "Oracle keys generated in: $KEYS_DIR"
|
||
|
|
echo "Password file: $PASSWORD_FILE"
|
||
|
|
echo "IMPORTANT: Store keys securely in Azure Key Vault for production."
|
||
|
|
|