Subversion Repositories DevTools

#! /bin/bash

ROOTCA=VixPulseManifestRootCA
CLIENT=VixPulseManifest
CLIENT_FQDN=Vix.Pulse.Manifest

# Generate a config file for creating the csr (cert signing Request)
cat << EOF > ${CLIENT}.cnf
FQDN = ${CLIENT_FQDN}

# the name of your organization
ORGNAME = Vix Technology

# --- no modifications required below ---
[ req ]
default_bits = 2048
default_md = sha256
prompt = no
encrypt_key = no

distinguished_name = dn
req_extensions = req_ext
x509_extensions     = x509_ext

[ x509_ext ]
keyUsage            = digitalSignature, keyEncipherment

[ dn ]
C = AU
O = \$ORGNAME
CN = \$FQDN

[ req_ext ]

EOF

echo Gen client certificate request
openssl genrsa -out ${CLIENT}.key 2048 2> /dev/null
openssl req -new -key ${CLIENT}.key -out ${CLIENT}.csr -config  ${CLIENT}.cnf

echo Sign with CA
openssl x509 -req -in ${CLIENT}.csr -CA ${ROOTCA}.crt -CAkey ${ROOTCA}.key -CAcreateserial -out ${CLIENT}.crt -days 36500 -sha256

echo Verify key
openssl verify -CAfile ${ROOTCA}.crt ${CLIENT}.crt

echo Generate signature
#set -x
TESTFILE=${CLIENT}.cnf
openssl dgst -sha1 -sign ${CLIENT}.key  -out file.out ${TESTFILE}

echo "Verify file signature - from certificate"
openssl x509  -in ${CLIENT}.crt -pubkey -noout >${CLIENT}.pubkey
openssl dgst -sha1 -verify ${CLIENT}.pubkey  -signature file.out ${TESTFILE}
rm -f file.out

echo Generated: ${CLIENT}.key
echo Generated: ${CLIENT}.crt  FQDN: \(${CLIENT_FQDN}\)


# Clean up unneeded files
rm -f *.pubkey
rm -f *.srl
rm -f *.csr