Files
nDPId-2/scripts/generate-tls-ca.sh
Toni Uhlig ac4c7390a3 Added TLS proxy support.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
2023-01-17 22:03:00 +01:00

33 lines
914 B
Bash
Executable File

#!/usr/bin/env sh
set -e
OUTDIR="$(dirname ${0})"
printf 'Output directory: %s\n' "${OUTDIR}"
printf 'ca\ncert_signing_key' > template
certtool --generate-privkey > "${OUTDIR}/ca-key.pem"
certtool --generate-self-signed \
--template template \
--load-privkey "${OUTDIR}/ca-key.pem" \
--outfile "${OUTDIR}/ca-cert.pem"
rm template
printf 'expiration_days = 365' > template
certtool --generate-crl --load-ca-privkey "${OUTDIR}/ca-key.pem" \
--template template \
--load-ca-certificate "${OUTDIR}/ca-cert.pem" \
--outfile "${OUTDIR}/crl.pem"
rm template
printf 'encryption_key\nsigning_key' > template
certtool --generate-privkey > "${OUTDIR}/server-key.pem"
certtool --generate-certificate \
--template template \
--load-privkey "${OUTDIR}/server-key.pem" \
--load-ca-certificate "${OUTDIR}/ca-cert.pem" \
--load-ca-privkey "${OUTDIR}/ca-key.pem" \
--outfile "${OUTDIR}/server-cert.pem"
rm template