From b87fe4164a74292c38d945524a9488b087bd9938 Mon Sep 17 00:00:00 2001 From: Ferdinand Schober Date: Mon, 28 Oct 2024 17:56:29 +0100 Subject: [PATCH] remove key-gen script --- gen-key.sh | 74 ------------------------------------------------------ 1 file changed, 74 deletions(-) delete mode 100755 gen-key.sh diff --git a/gen-key.sh b/gen-key.sh deleted file mode 100755 index aa6c81a..0000000 --- a/gen-key.sh +++ /dev/null @@ -1,74 +0,0 @@ -export SERVER_NAME="$1" -export CLIENT_NAME="$2" -export EXTFILE='extfile.conf' - -if [ -z "${CLIENT_NAME}" ]; then - echo "usage: $0 " >&2 - exit 1 -fi - -if [ -z "${SERVER_NAME}" ]; then - echo "usage: $0 " >&2 - exit 1 -fi - -echo 'subjectAltName = DNS:iridium' > "${EXTFILE}" - -# server - -## generate EC private key -openssl ecparam \ - -name prime256v1 \ - -genkey \ - -noout \ - -out "${SERVER_NAME}.pem" - -## generate certificate signing request -openssl req \ - -new \ - -key "${SERVER_NAME}.pem" \ - -sha256 \ - -subj '/C=NL' \ - -out "${SERVER_NAME}.csr" - -## generate CA certificate (server public key) -openssl x509 \ - -req \ - -in "${SERVER_NAME}.csr" \ - -extfile "${EXTFILE}" \ - -days 365 \ - -signkey "${SERVER_NAME}.pem" \ - -sha256 \ - -out "${SERVER_NAME}.pub.pem" - - -# client -## generate client private key -openssl ecparam \ - -name prime256v1 \ - -genkey \ - -noout \ - -out "${CLIENT_NAME}.pem" - -## generate client csr (= public key) -openssl req \ - -key "${CLIENT_NAME}.pem" \ - -new -sha256 \ - -subj '/C=NL' \ - -out "${CLIENT_NAME}.csr" - -## generate client certificate (=public key signed by CA) -openssl x509 \ - -req \ - -in "${CLIENT_NAME}.csr" \ - -extfile "${EXTFILE}" \ - -days 365 \ - -CA "${SERVER_NAME}.pub.pem" \ - -CAkey "${SERVER_NAME}.pem" \ - -set_serial '0xabcd' \ - -sha256 -out "${CLIENT_NAME}.pub.pem" - -# cleanup -rm "${EXTFILE}" \ - "${SERVER_NAME}.csr" \ - "${CLIENT_NAME}.csr"