Skip to content
Snippets Groups Projects
Normal view Permalink
create-ca.sh 331 B
Newer Older
Rodrigo Goncalves's avatar
Scripts and config for client certificate management
Rodrigo Goncalves committed
1 2 3 4 5 6 7 
#!/bin/bash

cd /certmanager

. config
openssl genpkey -algorithm RSA -out certificates/rootCA.key -pkeyopt rsa_keygen_bits:2048
openssl req -x509 -new -nodes -key certificates/rootCA.key -sha256 -days 3650 -out certificates/rootCA.pem -subj "/C=BR/ST=$STATE/L=$CITY/O=$ORG/OU=$UNIT/CN=$HOST" -set_serial "0x$(openssl rand -hex 8)"