rustls/test-ca/build-a-pki.sh

13 lines
732 B
Bash
Executable File

#!/bin/sh
set -xe
openssl req -nodes -x509 -newkey rsa:2048 -keyout ca.key -out ca.cert -sha256 -batch -subj "/CN=ponytown CA"
openssl req -nodes -newkey rsa:3072 -keyout inter.key -out inter.req -sha256 -batch -subj "/CN=ponytown level 2 intermediate"
openssl req -nodes -newkey rsa:2048 -keyout end.key -out end.req -sha256 -batch -subj "/CN=testserver.com"
openssl x509 -req -in inter.req -out inter.cert -CA ca.cert -CAkey ca.key -sha256 -set_serial 123 -extensions v3_inter -extfile openssl.cnf
openssl x509 -req -in end.req -out end.cert -CA inter.cert -CAkey inter.key -sha256 -set_serial 456 -extensions v3_end -extfile openssl.cnf
cat inter.cert ca.cert > end.chain
openssl asn1parse -in ca.cert -out ca.der > /dev/null