...
1#!/bin/sh
2
3# generate CA
4openssl genrsa -out myCA.key 4096
5openssl req -x509 -new -key myCA.key -out myCA.crt -days 730 -subj /CN="Go Swagger"
6
7# generate server cert and key
8openssl genrsa -out mycert1.key 4096
9openssl req -new -out mycert1.req -key mycert1.key -subj /CN="goswagger.local"
10openssl x509 -req -in mycert1.req -out mycert1.crt -CAkey myCA.key -CA myCA.crt -days 365 -CAcreateserial -CAserial serial
11
12# generate client cert, key and bundle
13openssl genrsa -out myclient.key 4096
14openssl req -new -key myclient.key -out myclient.csr
15openssl x509 -req -days 730 -in myclient.csr -out myclient.crt -CAkey myCA.key -CA myCA.crt -days 365 -CAcreateserial -CAserial serial
16openssl pkcs12 -export -clcerts -in myclient.crt -inkey myclient.key -out myclient.p12
View as plain text