Development of an internal social media platform with personalised dashboards for students
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

gencerts.sh 1.3KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768
  1. #!/bin/sh
  2. # Written by Christian Heimes
  3. set -e
  4. export CAOUTDIR=.
  5. export CATMPDIR=tmp
  6. rm -rf $CATMPDIR
  7. rm -rf ca.pem ca.key server.pem server.key client.pem client.key
  8. rm -rf cert9.db key4.db pkcs11.tx
  9. mkdir -p $CAOUTDIR
  10. mkdir -p $CATMPDIR
  11. touch $CATMPDIR/ca.db
  12. touch $CATMPDIR/ca.db.attr
  13. echo '01' > $CATMPDIR/ca.crt.srl
  14. echo '01' > $CATMPDIR/ca.crl.srl
  15. # root CA
  16. openssl req -new \
  17. -config ca.conf \
  18. -out $CATMPDIR/ca.csr \
  19. -keyout $CAOUTDIR/ca.key \
  20. -batch
  21. openssl ca -selfsign \
  22. -config ca.conf \
  23. -in $CATMPDIR/ca.csr \
  24. -out $CAOUTDIR/ca.pem \
  25. -extensions ca_ext \
  26. -days 3563 \
  27. -batch
  28. # server cert
  29. openssl req -new \
  30. -config server.conf \
  31. -out $CATMPDIR/server.csr \
  32. -keyout $CAOUTDIR/server.key \
  33. -batch
  34. openssl ca \
  35. -config ca.conf \
  36. -in $CATMPDIR/server.csr \
  37. -out $CAOUTDIR/server.pem \
  38. -policy match_pol \
  39. -extensions server_ext \
  40. -batch
  41. # client cert
  42. openssl req -new \
  43. -config client.conf \
  44. -out $CATMPDIR/client.csr \
  45. -keyout $CAOUTDIR/client.key \
  46. -batch
  47. openssl ca \
  48. -config ca.conf \
  49. -in $CATMPDIR/client.csr \
  50. -out $CAOUTDIR/client.pem \
  51. -policy match_pol \
  52. -extensions client_ext \
  53. -batch
  54. # cleanup
  55. rm -rf $CATMPDIR ca.key
  56. echo DONE