1#!/bin/sh 2 3digest='-mdc2' 4reqcmd="../apps/openssl req" 5x509cmd="../apps/openssl x509 $digest" 6verifycmd="../apps/openssl verify" 7dummycnf="../apps/openssl.cnf" 8 9CAkey="keyCA.ss" 10CAcert="certCA.ss" 11CAreq="reqCA.ss" 12CAconf="CAss.cnf" 13CAreq2="req2CA.ss" # temp 14 15Uconf="Uss.cnf" 16Ukey="keyU.ss" 17Ureq="reqU.ss" 18Ucert="certU.ss" 19 20echo 21echo "make a certificate request using 'req'" 22$reqcmd -config $CAconf -out $CAreq -keyout $CAkey -new #>err.ss 23if [ $? != 0 ]; then 24 echo "error using 'req' to generate a certificate request" 25 exit 1 26fi 27echo 28echo "convert the certificate request into a self signed certificate using 'x509'" 29$x509cmd -CAcreateserial -in $CAreq -days 30 -req -out $CAcert -signkey $CAkey >err.ss 30if [ $? != 0 ]; then 31 echo "error using 'x509' to self sign a certificate request" 32 exit 1 33fi 34 35echo 36echo "convert a certificate into a certificate request using 'x509'" 37$x509cmd -in $CAcert -x509toreq -signkey $CAkey -out $CAreq2 >err.ss 38if [ $? != 0 ]; then 39 echo "error using 'x509' convert a certificate to a certificate request" 40 exit 1 41fi 42 43$reqcmd -config $dummycnf -verify -in $CAreq -noout 44if [ $? != 0 ]; then 45 echo first generated request is invalid 46 exit 1 47fi 48 49$reqcmd -config $dummycnf -verify -in $CAreq2 -noout 50if [ $? != 0 ]; then 51 echo second generated request is invalid 52 exit 1 53fi 54 55$verifycmd -CAfile $CAcert $CAcert 56if [ $? != 0 ]; then 57 echo first generated cert is invalid 58 exit 1 59fi 60 61echo 62echo "make another certificate request using 'req'" 63$reqcmd -config $Uconf -out $Ureq -keyout $Ukey -new >err.ss 64if [ $? != 0 ]; then 65 echo "error using 'req' to generate a certificate request" 66 exit 1 67fi 68 69echo 70echo "sign certificate request with the just created CA via 'x509'" 71$x509cmd -CAcreateserial -in $Ureq -days 30 -req -out $Ucert -CA $CAcert -CAkey $CAkey >err.ss 72if [ $? != 0 ]; then 73 echo "error using 'x509' to sign a certificate request" 74 exit 1 75fi 76 77$verifycmd -CAfile $CAcert $Ucert 78echo 79echo "Certificate details" 80$x509cmd -subject -issuer -startdate -enddate -noout -in $Ucert 81 82echo 83echo The generated CA certificate is $CAcert 84echo The generated CA private key is $CAkey 85 86echo The generated user certificate is $Ucert 87echo The generated user private key is $Ukey 88 89/bin/rm err.ss 90exit 0 91