OpenSSL 秘密鍵とCSRを一緒に生成するシェルスクリプト

mkcsr.sh

#!/usr/bin/env bash
 
#Common Name (eg, your name or your server's hostname) 
CN="ssl.example.com"
# Country Name (2 letter code)
C="JP"
# State or Province Name (full name)
ST="Fukuoka"
# Locality Name (eg, city) 
L="Fukuoka"
# Organization Name (eg, company) 
O="Example Company co,ltd."
# Organizational Unit Name (eg, section)
OU="Web"
 
csrfile=$CN.csr
pkeyfile=$CN.key
subject="/C=$C/ST=$ST/L=$L/O=$O/OU=$OU/CN=$CN"
 
if [ -f $pkeyfile ] ; then
    echo "Error: Private Key already exists."
    exit
fi

openssl req -new -sha256 -newkey rsa:2048 -nodes -out $csrfile -keyout $pkeyfile -subj "$subject"

# CHECK modules
openssl req -in $csrfile -text
openssl rsa -in $pkeyfile -text
 
#cat $pkeyfile $csrfile

SHA2(sha256) 対応