Move certs dir

misc/CA.sh

@@ -0,0 +1,49 @@
+# Create CA for client
+#openssl genrsa -des3 -out ca.key 4096
+#openssl req -new -x509 -days 365 -key ca.key -out ca.crt
+#
+## Server cert
+#openssl genrsa -des3 -out server.key 2028
+#openssl req -new -key server.key -out server.csr
+#
+## Self sign ??
+#openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
+
+# TODO serial
+# TODO common name
+
+OPENSSL_CONF=openssl.cnf
+
+[ $# -ne 1 ] && echo "Usage: $0 init
+                                client NAME"
+
+case $1 in
+    "init" )
+        echo "Create CA for signing client certs"
+        openssl genrsa -des3 -out ca.key 4096
+        sed -i 's/=.*#CommonName/= FIC2014 CA#CommonNameEnd/' $OPENSSL_CONF
+        openssl req -batch -new -x509 -days 365 -key ca.key -out ca.crt
+
+        echo "Create server cert"
+        openssl genrsa -des3 -out server.key 2048
+        sed -i 's/=.*#CommonNameEnd/= FIC2014 Server#CommonNameEnd/' $OPENSSL_CONF
+        openssl req -batch -new -key server.key -out server.csr
+        openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
+        rm server.csr
+        ;;
+    "client" )
+        [ $# -ne 2 ] && "client Usage"
+        openssl genrsa -des3 -out client.key 2048
+        sed -i "s/=.*#CommonNameEnd/= $2#CommonNameEnd/" $OPENSSL_CONF
+        openssl req -batch -new -key client.key -out client.csr
+        openssl x509 -req -days 365 -in client.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out client.crt
+        openssl pkcs12 -export -inkey client.key  -in client.crt -name $2 -out ${2}.p12
+
+        rm client.key
+        rm client.csr
+        rm client.crt
+        ;;
+    "*" )
+        echo "*"
+        ;;
+esac