# check dates on hostcerts
for n in `seq -w 14 39` ;do ssh -o ConnectTimeout=5 -o StrictHostKeyChecking=no root@openssl x509 -in /etc/grid-security/hostcert.pem -noout -dates ;done

# make sure I have the latest version of cert sorcerer
for n in `seq -w 14 39` ;do echo sedsk$n; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n "rm -rf CS.py; wget https://raw.github.com/sfayer/cert_sorcerer/master/CS.py; chmod u+x CS.py" ;done

# make sure pyOpenSSL is installed, sigh
for n in `seq -w 26 30` ;do echo sedsk$n; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n yum -y install pyOpenSSL; done

# now do the renewal
for n in `seq -w 14 39` ;do echo sedsk$n; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n ./CS.py --sys --batch;done

# after certicates are approved, download the new certs
for n in `seq -w 14 39` ;do echo sedsk$n; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n ./CS.py --sys --fetch ; done
# ... and copy them into the right location and change ownership (dcache special!)
(if worried, make a backup: for n in `seq -w 14 39` ;do echo sedsk$n; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n "cp /etc/grid-security/hostcert.pem /etc/grid-security/hostcert.pem.2013; cp /etc/grid-security/hostkey.pem /etc/grid-security/hostkey.pem.2013;"; done )
for n in `seq -w 14 39` ;do echo sedsk$n; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n "cp /root/.cs/sedsk$n.grid.hep.ph.ic.ac.uk/cert.pem /etc/grid-security/hostcert.pem; chown dcache:root /etc/grid-security/hostcert.pem; cp /root/.cs/sedsk$n.grid.hep.ph.ic.ac.uk/key.pem /etc/grid-security/hostkey.pem; chown dcache:root /etc/grid-security/hostkey.pem;"; done
# happy now ? Restart dcache on the nodes
for n in `seq -w 14 39` ;do echo sedsk$n; sleep 20; ssh -o ConnectTimeout=30 -o StrictHostKeyChecking=no root@sedsk$n "service dcache restart"; done