#  $Id: security_enable,v 1.5 2012-10-24 08:52:18 ww161634 Exp $
#  Copyright (c) 2008, 2012, Oracle and/or its affiliates. All rights reserved.
#  This software code contains proprietary information
#  and should be treated as confidential.

security_enable_desc="  enable        Make SGD server secure"

_enable_usage="tarantella security enable
	[ --certfile <path_to_certfile>
	  [ --keyfile  <path_to_keyfile>    ]
	  [ --rootfile <path_to_rootCAfile> ] ]
	[ --firewalltraversal { off | on } ]"

sf_enable_usage="Usage: ${_enable_usage}"

lf_enable_usage="
${sf_enable_usage}

  Makes a ${PRODUCT_SHORT_NAME} server secure

  --certfile <path_to_certfile>
  --keyfile  <path_to_keyfile>
  --rootfile <path_to_rootCAfile>
  --firewalltraversal { off | on }
                      Default is \"off\"."

lf_before="
Before running this operation:"
lf_detach=" - you must detach the server from the array"
lf_confirm="Do you want to continue? (Y/N) "
lf_nochanges="No changes made"
lf_bad_certfile="--certfile parameter must point to a valid certificate"
lf_bad_certfile_nokey="If you supply --certfile without also supplying --keyfile,
the certificate file must contain both a certificate and a key"
lf_bad_certfile_failed="
Unable to install the supplied certificate file: no changes made."
lf_lonely_keyfile="If you specify --keyfile, you must also specify --certfile"
lf_bad_keyfile="--keyfile parameter must point to a valid key file"
lf_lonely_rootca="If you specify --rootfile, you must also specify --certfile"
lf_bad_rootca="--rootfile parameter must point to a valid certificate"
lf_alreadyenabled="Security appears to be already enabled.  Unable to continue, because:"
lf_alreadypeerssl="already running in peer ssl mode"
lf_alreadyff="already running in firewall forwarding mode"
lf_alreadycerts1="You already have a certificate in "
lf_alreadycerts2=".
You must delete all files from that directory before running this command
in default mode (using a selfsigned certificate)."
lf_dirtyfiles="
 - the following configuration file(s) have been locally modified:
"
lf_dirtyother="
 - the following configuration setting(s) have been locally modified:
"
pf1_cant_find="Can't find ${PRODUCT_SHORT_NAME} installation at %s - exiting
"
lf_warnrestart="WARNING: If you continue, the server will be restarted after carrying
out the necessary reconfiguration.  Any active user sessions will be lost.
"
lf_warnfwf="WARNING: If you continue, the server will be configured with firewall
traversal mode enabled.  This is not recommended.  Refer to
the ${PRODUCT_SHORT_NAME} Administration Guide for further details.
"
