From f9690dc20a342802275d70e088b34dfa8e8868b3 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Felix=20D=C3=B6rre?= Date: Tue, 8 Jul 2014 23:37:04 +0200 Subject: [PATCH] Make default name in generateKeys.sh configurable --- keys/.gitignore | 1 + keys/generateKeys.sh | 12 ++++++++---- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/keys/.gitignore b/keys/.gitignore index b2c4532a..9fe39e3e 100644 --- a/keys/.gitignore +++ b/keys/.gitignore @@ -6,3 +6,4 @@ testca csr crt testca.crl +config diff --git a/keys/generateKeys.sh b/keys/generateKeys.sh index 48111cc1..f0c26492 100755 --- a/keys/generateKeys.sh +++ b/keys/generateKeys.sh @@ -1,9 +1,13 @@ -#!/bin/sh +#!/bin/bash # this script generates a set of sample keys +DOMAIN="cacert.local" +KEYSIZE=4096 +[ -f config ] && . config + rm -Rf *.csr *.crt *.key *.pkcs12 testca -openssl genrsa -out testca.key 4096 +openssl genrsa -out testca.key ${KEYSIZE} openssl req -new -key testca.key -out testca.csr -subj "/CN=local cacert-gigi testCA" -config selfsign.config openssl x509 -req -days 365 -in testca.csr -signkey testca.key -out testca.crt @@ -15,8 +19,8 @@ echo unique_subject = no >testca/db.attr genserver(){ -openssl genrsa -out $1.key 4096 -openssl req -new -key $1.key -out $1.csr -subj "/CN=$1.cacert.local" -config selfsign.config +openssl genrsa -out $1.key ${KEYSIZE} +openssl req -new -key $1.key -out $1.csr -subj "/CN=$1.${DOMAIN}" -config selfsign.config openssl ca -cert testca.crt -keyfile testca.key -in $1.csr -out $1.crt -days 356 -batch -config selfsign.config openssl pkcs12 -inkey $1.key -in $1.crt -name $1 -export -passout pass:changeit -out $1.pkcs12 -- 2.39.2