Skip to content

Instantly share code, notes, and snippets.

@seiji
Created April 1, 2020 12:33
Show Gist options
  • Save seiji/551f379ce74a55e531a25f3e1313aa76 to your computer and use it in GitHub Desktop.
Save seiji/551f379ce74a55e531a25f3e1313aa76 to your computer and use it in GitHub Desktop.
cert
#!/bin/sh -e
DAYS=3650
PASS="pass"
WORKDIR=/etc/ssl
cd $WORKDIR
echo 01 > serial && touch index.txt
mkdir -p $WORKDIR/newcerts
mkdir -p $WORKDIR/private
openssl req -new -x509 \
-keyout private/cakey.pem \
-out cacert.pem \
-days ${DAYS} \
-subj /C=JP/CN=${CN}/ \
-nodes
openssl genrsa \
-out client.key 2048
openssl req -new \
-key client.key \
-out client.csr \
-subj /C=JP/CN=${CN}/ \
-sha256
openssl ca \
-policy policy_anything \
-out client.crt \
-in client.csr \
-days ${DAYS} \
-batch
openssl pkcs12 -export \
-in client.crt \
-inkey client.key \
-certfile cacert.pem \
-out ${CN}.p12 \
-name ${CN} \
-passout pass:${PASS}
cp -p ${CN}.p12 /certs/
cp -p cacert.pem /certs/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment