User Signing Certificates for AWS

mkcert.sh

#!/bin/bash
 
# Based in instructions here:
# http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingUserCerts.html
 
declare -ri key_size=2048
declare -ri days=365
 
openssl genrsa ${key_size} > private-key.pem
openssl pkcs8 -topk8 -nocrypt -inform PEM -in private-key.pem \
-out private-key-in-PCKS8-format.pem
echo -e '\n\n\n\n\n\n' | openssl req -new -x509 -nodes -sha1 \
-days ${days} -key private-key.pem -outform PEM \
>certificate.pem 2>/dev/null