trunk/openssl/openssl-make-certs.sh

#!/bin/sh
# $Header: /root/magellan-cvs/src/openssl/openssl-make-certs.sh,v 1.3 2010-03-04 15:49:23 niro Exp $

SSLDIR="${SSLDIR-/etc/ssl}"
SSLCONFIG="${SSLCONFIG-${SSLDIR}/openssl.cnf}"
CERTDIR="${SSLDIR}/certs"
KEYDIR="${SSLDIR}/private"
CERTNAME="$1"
CERTFILE="${CERTDIR}/${CERTNAME}.pem"
KEYFILE="${KEYDIR}/${CERTNAME}.key"

die() { echo "ERROR: $@"; exit 1; }

usage()
{
	echo "Usage:"
	echo "      $0 [cert-name]"
	echo
	echo "The environment variables \$SSLCONFIG and \$SSLDIR will be respected too."
	echo
	die "No certificate name given!"
}

# sanity checks
[[ $(id -u) -ne 0 ]] && die "You must be root!"
[[ -z ${CERTNAME} ]] && usage
[ ! -d ${CERTDIR} ] && die "${CERTDIR} directory doesn't exist!"
[ ! -d ${KEYDIR} ] && die "${KEYDIR} directory doesn't exist!"
[ -f ${CERTFILE} ] && die "${CERTFILE} already exists, won't overwrite!"
[ -f ${KEYFILE} ] && die "${KEYFILE} already exists, won't overwrite!"

echo
echo "You may want to setup your default ssl config file first."
echo "Just edit '${SSLCONFIG}'."
echo
echo "Press [Enter] to continue, [CTRL-C] to abort."
read

openssl req -new -x509 -nodes -config ${SSLCONFIG} -out ${CERTFILE} -keyout ${KEYFILE} -days 365 || die "Certificate request failed!"
# combine cert and keyfile to one cert
cat ${CERTFILE} ${KEYFILE} > ${CERTFILE}.combined || die "Combine [cat] failed!"
rm ${CERTFILE} || die "Combine [rm] failed!"
mv ${CERTFILE}{.combined,} || die "Combine [mv] failed!"
chown root:root ${CERTFILE} ${KEYFILE} || die "Ownership failed!"
chmod 0400 ${CERTFILE} ${KEYFILE} || die "Permissions failed!"
echo
openssl x509 -subject -fingerprint -noout -in ${CERTFILE} || die "Fingerprint failed!"
1	niro	996	#!/bin/sh
2	niro	1002	# $Header: /root/magellan-cvs/src/openssl/openssl-make-certs.sh,v 1.3 2010-03-04 15:49:23 niro Exp $
3	niro	996
4	niro	998	SSLDIR="${SSLDIR-/etc/ssl}"
5			SSLCONFIG="${SSLCONFIG-${SSLDIR}/openssl.cnf}"
6			CERTDIR="${SSLDIR}/certs"
7			KEYDIR="${SSLDIR}/private"
8	niro	996	CERTNAME="$1"
9	niro	998	CERTFILE="${CERTDIR}/${CERTNAME}.pem"
10			KEYFILE="${KEYDIR}/${CERTNAME}.key"
11	niro	996
12			die() { echo "ERROR: $@"; exit 1; }
13
14			usage()
15			{
16			echo "Usage:"
17			echo " $0 [cert-name]"
18			echo
19	niro	998	echo "The environment variables \$SSLCONFIG and \$SSLDIR will be respected too."
20	niro	996	echo
21			die "No certificate name given!"
22			}
23
24			# sanity checks
25			[[ $(id -u) -ne 0 ]] && die "You must be root!"
26			[[ -z ${CERTNAME} ]] && usage
27	niro	998	[ ! -d ${CERTDIR} ] && die "${CERTDIR} directory doesn't exist!"
28			[ ! -d ${KEYDIR} ] && die "${KEYDIR} directory doesn't exist!"
29			[ -f ${CERTFILE} ] && die "${CERTFILE} already exists, won't overwrite!"
30			[ -f ${KEYFILE} ] && die "${KEYFILE} already exists, won't overwrite!"
31	niro	996
32			echo
33			echo "You may want to setup your default ssl config file first."
34			echo "Just edit '${SSLCONFIG}'."
35			echo
36			echo "Press [Enter] to continue, [CTRL-C] to abort."
37			read
38
39			openssl req -new -x509 -nodes -config ${SSLCONFIG} -out ${CERTFILE} -keyout ${KEYFILE} -days 365 \|\| die "Certificate request failed!"
40	niro	998	# combine cert and keyfile to one cert
41	niro	1002	cat ${CERTFILE} ${KEYFILE} > ${CERTFILE}.combined \|\| die "Combine [cat] failed!"
42			rm ${CERTFILE} \|\| die "Combine [rm] failed!"
43			mv ${CERTFILE}{.combined,} \|\| die "Combine [mv] failed!"
44	niro	996	chown root:root ${CERTFILE} ${KEYFILE} \|\| die "Ownership failed!"
45	niro	998	chmod 0400 ${CERTFILE} ${KEYFILE} \|\| die "Permissions failed!"
46	niro	996	echo
47			openssl x509 -subject -fingerprint -noout -in ${CERTFILE} \|\| die "Fingerprint failed!"