Generate OpenSSL PKI

genpki.sh

#!/bin/sh -e

echo "        > Generating CA key..."
openssl genpkey -algorithm ed25519 > "ca.key"

echo "        > Generating CA certificate..."
openssl req -days 3650 -new -x509 -key "ca.key" -out "ca.pem" -subj "/CN=ca"

echo "        > Generating server key..."
openssl genpkey -algorithm ed25519 > "server.key"

echo "        > Generating server certificate request..."
openssl req -new -key "server.key" -out "server.csr" -subj "/CN=server" -addext "subjectAltName=DNS:server"

echo "        > Signing server certificate request..."
openssl x509 -req -days 3650 -in "server.csr" -CA "ca.pem" -CAcreateserial -CAkey "ca.key" -out "server.pem" -extfile <(echo "subjectAltName=DNS:server")