my-ca

ca.sh

function gen() {
    ca_subj=$1
    cert_subj=$2
    name=$3
    day=$4

    # create ca
    openssl req -new -x509 -nodes -days ${day} -subj "/CN=$ca_subj" -keyout ${name}ca.key -out ${name}ca.crt
    # private key
    openssl genrsa -out ${name}.key

    # certificate signing
    openssl req -new -key ${name}.key -subj "/CN=$cert_subj" -out ${name}.csr

    #
    openssl x509 -req -in ${name}.csr -CA ${name}ca.crt -CAkey ${name}ca.key -CAcreateserial -days ${day} -out ${name}.crt

    # confirm
    openssl x509 -in ${name}.crt -text -noout
}

gen "$1" "$2" "$3" $4