From b42f9414b6539dceeb6d718c3f7ddc26c8c2181e Mon Sep 17 00:00:00 2001
From: hms <hms@sern.network>
Date: Wed, 3 Feb 2021 15:22:35 -0800
Subject: [PATCH] check if user passed root ca cert and stop if did

---
 update-NebulaNodeCert | 23 ++++++++++++++++-------
 1 file changed, 16 insertions(+), 7 deletions(-)

diff --git a/update-NebulaNodeCert b/update-NebulaNodeCert
index 459f1e2..0d875a0 100644
--- a/update-NebulaNodeCert
+++ b/update-NebulaNodeCert
@@ -24,10 +24,10 @@ esac
 done
 set -- "${POSITIONAL[@]}" # restore positional parameters
 
-#if [[ -n $1 ]]; then
-#    echo "Invalid Parameter(s) Entered: $1"
-#   exit
-#fi
+if [[ -n $1 ]]; then
+    echo "Invalid Parameter(s) Entered: $1"
+    exit
+fi
 
 #if [[ -n ${IPADDRESS} ]]; then
 #    echo "IP Address = ${IPADDRESS}"
@@ -36,7 +36,16 @@ set -- "${POSITIONAL[@]}" # restore positional parameters
 NODENAME=$(${NEBULACERTBINPATH} print -path ${CERTPATH} -json | jq -s .[].details.name | sed 's/["]//g')
 NODEIPS=$(${NEBULACERTBINPATH} print -path ${CERTPATH} -json | jq -s --compact-output .[].details.ips | sed 's/[]["]//g')
 NODEGROUPS=($(${NEBULACERTBINPATH} print -path ${CERTPATH} -json | jq -s --compact-output .[].details.groups | sed 's/[]["]//g' | sed 's/,/ /g'))
+CERTISCASTATUS=$(${NEBULACERTBINPATH} print -path ${CERTPATH} -json | jq -s --compact-output .[].details.isCa)
+
+if [[ $CERTISCASTATUS == true ]]; then
+    echo "Certificate is the root CA Certificate. Try again with a node certificate."
+    exit
+fi
 
-echo "Node Name: ${NODENAME}"
-echo "Node IPs: ${NODEIPS}"
-echo "Node Groups: ${NODEGROUPS[@]}"
\ No newline at end of file
+if [[ $CERTISCASTATUS == false ]]; then
+    echo "Node Name: ${NODENAME}"
+    echo "Node IPs: ${NODEIPS}"
+    echo "Node Groups: ${NODEGROUPS[@]}"
+    echo "Certificate isCa Status: ${CERTISCASTATUS}"
+fi
\ No newline at end of file