26 lines
675 B
Bash
26 lines
675 B
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
if [ $# -ne 2 ]
|
||
|
|
then
|
||
|
|
echo "Usage: $0 alias \"pass phrase\""
|
||
|
|
exit -1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Generate a 2048 bit RSA key with public exponent 3.
|
||
|
|
# Encrypt private key with provided password.
|
||
|
|
openssl genrsa -3 -out $1.pem -passout pass:"$2" 2048
|
||
|
|
|
||
|
|
# Create a self-signed cert for this key.
|
||
|
|
openssl req -new -x509 -key $1.pem -passin pass:"$2" \
|
||
|
|
-out $1-cert.pem \
|
||
|
|
-batch -days 10000
|
||
|
|
|
||
|
|
# Create a PKCS12 store containing the generated private key.
|
||
|
|
# Protect the keystore and the private key with the provided password.
|
||
|
|
openssl pkcs12 -export -in $1-cert.pem -inkey $1.pem -passin pass:"$2" \
|
||
|
|
-out $1.p12 -name $1 -passout pass:"$2"
|
||
|
|
|
||
|
|
rm $1.pem
|
||
|
|
rm $1-cert.pem
|
||
|
|
|