pki.txt

# export PASSWORD="bobloblawslawblog
# export USER=jameswhite
(
  cd /var/cache/git/easy-rsa/easyrsa3;
  ./easyrsa gen-req ${USER}.user.thebikeshed.io nopass
  ./easyrsa sign-req client ${USER}.user.thebikeshed.io
  # openssl rsa -in pki/private/${USER}.user.thebikeshed.io.key -out pki/private/${USER}.user.thebikeshed.io.ckey
  openssl pkcs12 -export \
                 -out   ${USER}.user.thebikeshed.io.p12 \
                 -inkey pki/private/${USER}.user.thebikeshed.io.key \
                 -in    pki/issued/${USER}.user.thebikeshed.io.crt \
                 -certfile pki/ca.crt \
                 -passout fd:0
)



  echo "${PASSWORD}" | \
  openssl pkcs12 -export \
                 -out   ${USER}.user.thebikeshed.io.p12 \
                 -inkey pki/private/${USER}.hq.thebikeshed.io.ckey \
                 -in    pki/issued/${USER}.hq.thebikeshed.io.crt \
                 -certfile pki/ca.crt \
                 -passout fd:0