commonFunctions

   1 . structure
   2
   3 genKey(){ #subj, internalName
   4     openssl genrsa -out $2.key ${KEYSIZE}
   5     openssl req -new -key $2.key -out $2.csr -subj "$1/O=Test Environment CA Ltd./OU=Test Environment CAs"
   6
   7 }
   8
   9 genca(){ #subj, internalName
  10     mkdir $2.ca
  11
  12     genKey "$1" "$2.ca/key"
  13
  14     mkdir $2.ca/newcerts
  15     echo 01 > $2.ca/serial
  16     touch $2.ca/db
  17     echo unique_subject = no >$2.ca/db.attr
  18
  19 }
  20
  21 caSign(){ # csr,ca,config,start,end
  22     start="$4"
  23     end="$5"
  24     [ "$start" != "" ] && start="-startdate $start"
  25     [ "$end" != "" ] && end="-enddate $end"
  26     [ "$start" == "" -a "$end" == "" ] && start="-days 366"
  27     BASE="$PWD"
  28     echo "Signing: $1 with $2"
  29     echo "$start $end"
  30     pushd $2.ca > /dev/null
  31     openssl ca -cert key.crt -keyfile key.key -in "$BASE/$1.csr" -out "$BASE/$1.crt" -batch -config "$BASE/selfsign.config" -extfile "$BASE/$3" $start $end
  32     popd > /dev/null
  33     echo "Signed"
  34 }
  35