Return to genserv.sh CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / curl / tests / certs / scripts

Annotation of embedaddon/curl/tests/certs/scripts/genserv.sh, revision 1.1.1.1

1.1       misho       1: #!/bin/bash
                      2: 
                      3: # (c) CopyRight 2000 - 2020, EdelWeb for EdelKey and OpenEvidence
                      4: # Author: Peter Sylvester
                      5: 
                      6: # "libre" for integration with curl
                      7: 
                      8: OPENSSL=openssl
                      9: if [ -f /usr/local/ssl/bin/openssl ] ; then
                     10:    OPENSSL=/usr/local/ssl/bin/openssl
                     11: fi
                     12: 
                     13: USAGE="echo Usage is genserv.sh <prefix> <caprefix>"
                     14: 
                     15: HOME=`pwd`
                     16: cd $HOME
                     17: 
                     18: KEYSIZE=2048
                     19: DURATION=3000
                     20: # The -sha256 option was introduced in OpenSSL 1.0.1
                     21: DIGESTALGO=-sha256
                     22: 
                     23: REQ=YES
                     24: P12=NO
                     25: DHP=NO
                     26: 
                     27: PREFIX=$1
                     28: if [ ".$PREFIX" = . ] ; then
                     29:    echo No configuration prefix
                     30:    NOTOK=1
                     31: else
                     32:    if [ ! -f $PREFIX-sv.prm ] ; then
                     33:       echo No configuration file $PREFIX-sv.prm
                     34:       NOTOK=1
                     35:    fi
                     36: fi
                     37: 
                     38: CAPREFIX=$2
                     39: if [ ".$CAPREFIX" = . ] ; then
                     40:    echo No CA prefix
                     41:    NOTOK=1
                     42: else
                     43:    if [ ! -f $CAPREFIX-ca.cacert ] ; then
                     44:       echo No CA certificate file $CAPREFIX-ca.caert
                     45:       NOTOK=1
                     46:    fi
                     47:    if [ ! -f $CAPREFIX-ca.key ] ; then
                     48:       echo No $CAPREFIX key
                     49:       NOTOK=1
                     50:    fi
                     51: fi
                     52: 
                     53: if [ ".$NOTOK" != . ] ; then
                     54:    echo "Sorry, I can't do that for you."
                     55:    $USAGE
                     56:    exit
                     57: fi
                     58: 
                     59: if [ ".$SERIAL" = . ] ; then
                     60:    GETSERIAL="\$t = time ;\$d =  \$t . substr(\$t+$$ ,-4,4)-1;print \$d"
                     61:    SERIAL=`/usr/bin/env perl -e "$GETSERIAL"`
                     62: fi
                     63: 
                     64: echo SERIAL=$SERIAL PREFIX=$PREFIX CAPREFIX=$CAPREFIX DURATION=$DURATION KEYSIZE=$KEYSIZE
                     65: 
                     66: if [ "$DHP." = YES. ] ; then
                     67:    echo "openssl dhparam -2 -out $PREFIX-sv.dhp $KEYSIZE"
                     68:    $OPENSSL dhparam -2 -out $PREFIX-sv.dhp $KEYSIZE
                     69: fi
                     70: 
                     71: if [ "$REQ." = YES. ] ; then
                     72:    echo "openssl req -config $PREFIX-sv.prm -newkey rsa:$KEYSIZE -keyout $PREFIX-sv.key -out $PREFIX-sv.csr -passout XXX"
                     73:    $OPENSSL req -config $PREFIX-sv.prm -newkey rsa:$KEYSIZE -keyout $PREFIX-sv.key -out $PREFIX-sv.csr -passout pass:secret
                     74: fi
                     75: 
                     76: echo "openssl rsa -in $PREFIX-sv.key -out $PREFIX-sv.key"
                     77: $OPENSSL rsa -in $PREFIX-sv.key -out $PREFIX-sv.key -passin pass:secret
                     78: echo pseudo secrets generated
                     79: 
                     80: echo "openssl rsa -in $PREFIX-sv.key -pubout -outform DER -out $PREFIX-sv.pub.der"
                     81: $OPENSSL rsa -in $PREFIX-sv.key -pubout -outform DER -out $PREFIX-sv.pub.der
                     82: 
                     83: echo "openssl rsa -in $PREFIX-sv.key -pubout -outform PEM -out $PREFIX-sv.pub.pem"
                     84: $OPENSSL rsa -in $PREFIX-sv.key -pubout -outform PEM -out $PREFIX-sv.pub.pem
                     85: 
                     86: echo "openssl x509 -set_serial $SERIAL -extfile $PREFIX-sv.prm -days $DURATION  -CA $CAPREFIX-ca.cacert -CAkey $CAPREFIX-ca.key -in $PREFIX-sv.csr -req -text -nameopt multiline $DIGESTALGO > $PREFIX-sv.crt "
                     87: 
                     88: $OPENSSL x509 -set_serial $SERIAL -extfile $PREFIX-sv.prm -days $DURATION  -CA $CAPREFIX-ca.cacert -CAkey $CAPREFIX-ca.key -in $PREFIX-sv.csr -req -text -nameopt multiline $DIGESTALGO > $PREFIX-sv.crt
                     89: 
                     90: if [ "$P12." = YES. ] ; then
                     91: 
                     92:    echo "$OPENSSL pkcs12 -export -des3 -out $PREFIX-sv.p12 -caname $CAPREFIX -name $PREFIX -inkey $PREFIX-sv.key -in $PREFIX-sv.crt -certfile $CAPREFIX-ca.crt "
                     93: 
                     94:    $OPENSSL pkcs12 -export -des3 -out $PREFIX-sv.p12 -caname $CAPREFIX -name $PREFIX -inkey $PREFIX-sv.key -in $PREFIX-sv.crt -certfile $CAPREFIX-ca.crt
                     95: fi
                     96: 
                     97: echo "openssl x509 -noout -text -hash -in $PREFIX-sv.selfcert -nameopt multiline"
                     98: $OPENSSL x509 -noout -text -hash -in $PREFIX-sv.crt -nameopt multiline
                     99: 
                    100: # revoke server cert
                    101: touch $CAPREFIX-ca.db
                    102: echo 01 > $CAPREFIX-ca.cnt
                    103: echo "openssl ca -config $CAPREFIX-ca.cnf -revoke $PREFIX-sv.crt"
                    104: $OPENSSL ca -config $CAPREFIX-ca.cnf -revoke $PREFIX-sv.crt
                    105: 
                    106: # issue CRL
                    107: echo "openssl ca -config $CAPREFIX-ca.cnf -gencrl -out $PREFIX-sv.crl"
                    108: $OPENSSL ca -config $CAPREFIX-ca.cnf -gencrl -out $PREFIX-sv.crl
                    109: 
                    110: echo "openssl x509 -in $PREFIX-sv.crt -outform der -out $PREFIX-sv.der "
                    111: $OPENSSL x509 -in $PREFIX-sv.crt -outform der -out $PREFIX-sv.der
                    112: 
                    113: # all together now
                    114: touch $PREFIX-sv.dhp
                    115: cat $PREFIX-sv.prm $PREFIX-sv.key  $PREFIX-sv.crt $PREFIX-sv.dhp >$PREFIX-sv.pem
                    116: chmod o-r $PREFIX-sv.prm
                    117: 
                    118: echo "$PREFIX-sv.pem done"