Create root CA and certificates

create-cert.sh

#!/bin/bash

DOMAIN=$1
MERGED="$DOMAIN-merged.crt"


echo "Generating private key for certificate signing request" > /dev/stderr
openssl genrsa -out $DOMAIN.key 2048
echo "Creating a certificate signing request" > /dev/stderr
openssl req -new -key $DOMAIN.key -out $DOMAIN.csr \
    -subj "/C=US/ST=New York/L=New York/O=NYU LMC/OU=IIME/CN=$DOMAIN"

echo "Generating certificate" > /dev/stderr
openssl x509 -req -in $DOMAIN.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out $DOMAIN.crt -days 500 -sha256

echo "Merging certificate to single file [$MERGED]" > /dev/stderr
cat $DOMAIN.crt rootCA.pem > $DOMAIN-merged.crt

echo "Done" > /dev/stderr

create-root-ca.sh

#!/bin/bash

echo "Generating root CA private key" > /dev/stderr
openssl genrsa -out rootCA.key 2048
echo "Generating root CA certificate" > /dev/stderr
openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem \
    -subj '/C=US/ST=New York/L=New York/O=NYU LMC/OU=IIME/CN=nyumc.org'