Add a textarea to show the output of the CA.sh

misc/CA.sh

@@ -25,6 +25,8 @@ usage()
 
 [ $# -lt 1 ] && usage
 
+OUTPUT=`mktemp`
+
 case $1 in
     "-newca" )
 #        echo -e -n "${GREEN}Create the directories, take care this will delete"
@@ -45,7 +47,11 @@ case $1 in
         sed -i "s/=.*#DIR/= ${ESCAPED} #DIR/" $OPENSSL_CONF
         sed -i "s/=.*#CERTTYPE/= server #CERTTYPE/" $OPENSSL_CONF
 
-        pass=`pwgen 10 1`
+        pass=`pwgen 10 1` 2> $OUTPUT
+        if [ $? -ne 0 ]; then
+            cat $OUTPUT
+            exit 5
+        fi
 
         openssl req -batch -new -keyout ${TOP_DIR}/private/${CAKEY}         \
                     -out ${TOP_DIR}/${CAREQ} -passout pass:$pass            \
@@ -72,7 +78,7 @@ case $1 in
         echo -e "${GREEN}Signing the Server crt${COLOR_RST}"
         openssl ca -policy policy_match -out server.crt -infiles server.csr
         if [ $? -ne 0 ]; then
-            echo -e "${RED}Signing failed${COLOR_RST}"
+            echo -e "${RED}Signing failed for new server${COLOR_RST}"
             rm -rf server.key server.crt server.csr
             exit 3
         else
@@ -94,7 +100,11 @@ case $1 in
         sed -i "s/=.*#COMMONNAME/= $2#COMMONNAME/" $OPENSSL_CONF
         sed -i "s/=.*#CERTTYPE/= client #CERTTYPE/" $OPENSSL_CONF
 
-        pass=`pwgen 10 1`
+        pass=`pwgen 10 1` 2> $OUTPUT
+        if [ $? -ne 0 ]; then
+            cat $OUTPUT
+            exit 5
+        fi
 
         openssl req -batch -new -keyout ${2}.key -out ${2}.csr              \
                     -config ${OPENSSL_CONF} -passout pass:$pass -days ${DAYS}
@@ -103,14 +113,14 @@ case $1 in
         openssl ca -batch -policy policy_match -out ${2}.crt                \
                    -config ${OPENSSL_CONF} -infiles ${2}.csr
         if [ $? -ne 0 ]; then
-            echo -e "${RED}Signing failed${COLOR_RST}"
+            echo -e "${RED}Signing failed for $2 ${COLOR_RST}"
             exit 3
         fi
 #        echo -e "${GREEN}Export the Client files to pkcs12${COLOR_RST}"
         openssl pkcs12 -export -inkey ${2}.key -in ${2}.crt -name ${2}      \
                        -passin pass:$pass -out ${2}.p12 -passout pass:$pass
         if [ $? -ne 0 ]; then
-            echo -e "${RED}pkcs12 export failed${COLOR_RST}"
+            echo -e "${RED}pkcs12 export failed${COLOR_RST} for $2"
             exit 4
         else
             echo -e "Exported pkcs12 file is ${2}.p12"