forked from unitoo/configurations
32 lines
1.1 KiB
Bash
32 lines
1.1 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
# =============================================================================
|
||
|
|
# ssl-certs.sh - Self signing SSL certificates
|
||
|
|
#
|
||
|
|
# Author: Steve Shreeve <steve.shreeve@gmail.com>
|
||
|
|
# Date: Dec 17, 2022
|
||
|
|
#
|
||
|
|
# Edited: Claudio Maradonna <claudio@unitoo.pw>
|
||
|
|
# =============================================================================
|
||
|
|
|
||
|
|
# Use https://gist.github.com/shreeve/3358901a26a21d4ddee0e1342be7749d
|
||
|
|
# See https://gist.github.com/fntlnz/cf14feb5a46b2eda428e000157447309
|
||
|
|
|
||
|
|
# variables
|
||
|
|
root="MYCERT"
|
||
|
|
myip="$(ifconfig | awk '/inet / { print $2 }' | grep -v -E "^127\." | head -1)"
|
||
|
|
|
||
|
|
# create root key and certificate
|
||
|
|
openssl genrsa -out "${root}.key" 3072
|
||
|
|
openssl req -x509 -nodes -sha256 -new -key "${root}.key" -out "${root}.crt" -days 731 \
|
||
|
|
-subj "/CN=${root} Root Certificate" \
|
||
|
|
-addext "keyUsage = critical, keyCertSign" \
|
||
|
|
-addext "basicConstraints = critical, CA:TRUE, pathlen:0" \
|
||
|
|
-addext "subjectKeyIdentifier = hash"
|
||
|
|
|
||
|
|
sudo cp ${root}.crt /usr/local/share/ca-certificates/${root}.crt
|
||
|
|
sudo update-ca-certificates
|
||
|
|
|
||
|
|
# review files
|
||
|
|
echo "--"; openssl x509 -in "${root}.crt" -noout -text
|