c/civetweb
1
0
Fork 0
mirror of https://github.com/civetweb/civetweb synced 2025-03-28 21:13:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update example script for certificate generation

Browse Source
This commit is contained in:
bel2125 2023-01-16 11:56:17 +01:00
parent 8cc6a8e5bf
commit 60845fb779
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
resources/cert/make_certs.sh
View File

@ -1,4 +1,8 @@
#!/bin/sh
server_name="localhost"
cert_subject="/C=XX/ST=ExampleState/L=ExampleCity/O=ExampleCorp/OU=ExampleDepartment/CN=$server_name"
echo "Creating new certificates"
rm server.* client.* rootCA.* server_bkup.*
echo "Using 'pass' for every password"
@ -7,7 +11,7 @@ echo "Using 'pass' for every password"
echo "Generating a root CA ..."
openssl genrsa -passout pass:pass -out rootCA.key 2048
openssl req -passout pass:pass -new -key rootCA.key -out rootCA.csr -subj "/C=AA/ST=localhost/L=localhost/O=localhost/OU=localhost/CN=localhost"
openssl req -passout pass:pass -new -key rootCA.key -out rootCA.csr -subj $cert_subject
# For a test certificate, use "AA" as "user assigned" language code: https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#AA
cp rootCA.key rootCA.key.orig
@ -20,7 +24,7 @@ cat rootCA.key >> rootCA.pem
echo "Generating client certificate ..."
openssl genrsa -passout pass:pass -out client.key 2048
openssl req -passout pass:pass -new -key client.key -out client.csr -subj "/C=AA/ST=localhost/L=localhost/O=localhost/OU=localhost/CN=localhost"
openssl req -passout pass:pass -new -key client.key -out client.csr -subj $cert_subject
cp client.key client.key.orig
@ -37,7 +41,7 @@ openssl pkcs12 -passout pass:pass -export -inkey client.key -in client.pem -name
echo "Generating first server certificate ..."
openssl genrsa -passout pass:pass -out server.key 2048
openssl req -passout pass:pass -new -key server.key -out server.csr -subj "/C=AA/ST=localhost/L=localhost/O=localhost/OU=localhost/CN=localhost"
openssl req -passout pass:pass -new -key server.key -out server.csr -subj $cert_subject
cp server.key server.key.orig
@ -46,7 +50,7 @@ openssl rsa -in server.key.orig -out server.key
echo "authorityKeyIdentifier=keyid,issuer" > server.ext
echo "basicConstraints=critical,CA:FALSE" >> server.ext
echo "keyUsage=digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment" >> server.ext
echo "subjectAltName=DNS:localhost" >> server.ext
echo "subjectAltName=DNS:$server_name" >> server.ext
openssl x509 -req -days 3650 -sha256 -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -extfile server.ext -in server.csr -out server.crt
#openssl x509 -req -days 3650 -sha256 -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -extfile server.ext -in server.csr -signkey server.key -out server.crt
@ -67,7 +71,7 @@ cat server.pin
echo "Generating backup server certificate ..."
openssl genrsa -passout pass:pass -out server_bkup.key 2048
openssl req -passout pass:pass -new -key server_bkup.key -out server_bkup.csr -subj "/C=AA/ST=localhost/L=localhost/O=localhost/OU=localhost/CN=localhost"
openssl req -passout pass:pass -new -key server_bkup.key -out server_bkup.csr -subj $cert_subject
cp server_bkup.key server_bkup.key.orig