mirror of
https://github.com/openziti/ziti.git
synced 2026-10-11 23:12:35 +00:00
Andrew Martinez
30 lines
928 B
Bash
30 lines
928 B
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
fingerprints=""
|
|
|
|
create_client_key_pair(){
|
|
openssl ca -config cnf/openssl.$1.cnf -passin pass:$2 -revoke $3.cert.pem || true
|
|
rm $3.cert.pem || true
|
|
|
|
echo -e "\e[36mCreating an external client certificate for: $3\e[0m"
|
|
openssl ecparam -name secp384r1 -genkey -out $3.key.pem
|
|
|
|
openssl req -batch -config cnf/openssl.$1.cnf -key $3.key.pem -new -sha256 -out $3.csr.pem
|
|
openssl ca -batch -config cnf/openssl.$1.cnf -extensions usr_cert -days 375 -notext -md sha256 -in $3.csr.pem -out $3.cert.pem -passin pass:$2
|
|
|
|
rm $3.csr.pem || true
|
|
newprint="$(openssl x509 -noout -fingerprint -inform pem -in $3.cert.pem)"
|
|
nl=$'\n'
|
|
fingerprints="$fingerprints$nl - $3: $newprint"
|
|
}
|
|
|
|
echo "Enter the CA directory name, followed by [enter]"
|
|
read caDir
|
|
|
|
echo "Enter name of the cert/key files, followed by [enter]"
|
|
read outName
|
|
|
|
create_client_key_pair $caDir 1234 $outName
|
|
|
|
echo "Done" |