Commit 03f7e027 authored by Mikko Piuhola's avatar Mikko Piuhola

createSimplifiedServerCert: allow extra options for req

parent ef2995f0
......@@ -2,10 +2,11 @@
set -o errexit
VALID_FOR_DAYS="${VALID_FOR_DAYS:-365}"
echo 'Creating a directory to store the certificate files'
CERT_DIR="generated-certs"
CERT_FNAME="$CERT_DIR/serverCert"
VALID_FOR_DAYS="${VALID_FOR_DAYS:-365}"
mkdir -p $CERT_DIR
echo 'Generating a private key'
......@@ -17,7 +18,7 @@ openssl rsa -in $CERT_FNAME.key.pem.orig -out $CERT_FNAME.key.pem
chmod 400 $CERT_FNAME.key.pem*
echo 'Generating a Certificate Signing Request'
openssl req -new -sha256 -key $CERT_FNAME.key.pem -out $CERT_FNAME.csr
openssl req -new -sha256 -key $CERT_FNAME.key.pem -out $CERT_FNAME.csr $EXTRA_REQ_OPTS
echo 'Generating the actual certificate'
openssl x509 -req -days "$VALID_FOR_DAYS" -in $CERT_FNAME.csr -signkey $CERT_FNAME.key.pem -out $CERT_FNAME.crt
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment