summaryrefslogtreecommitdiffstats
path: root/scripts/nssdb-ca_signing-csr-restore.sh
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-10-20 21:30:52 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-10-20 21:31:27 +0200
commit1cbf6fc8c9381f0835530dc0753f7c7af7502d88 (patch)
tree7c874c3cb422f8719fe49ffbdb67fa0273964bb0 /scripts/nssdb-ca_signing-csr-restore.sh
parenta2412da7c00eceb51aa946fcd120ae9441e94e33 (diff)
downloadpki-dev-1cbf6fc8c9381f0835530dc0753f7c7af7502d88.tar.gz
pki-dev-1cbf6fc8c9381f0835530dc0753f7c7af7502d88.tar.xz
pki-dev-1cbf6fc8c9381f0835530dc0753f7c7af7502d88.zip
Added NSSDB scripts.
Diffstat (limited to 'scripts/nssdb-ca_signing-csr-restore.sh')
-rwxr-xr-xscripts/nssdb-ca_signing-csr-restore.sh16
1 files changed, 16 insertions, 0 deletions
diff --git a/scripts/nssdb-ca_signing-csr-restore.sh b/scripts/nssdb-ca_signing-csr-restore.sh
new file mode 100755
index 0000000..d1a7603
--- /dev/null
+++ b/scripts/nssdb-ca_signing-csr-restore.sh
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+echo -e "y\n\ny\n" | \
+ certutil -R \
+ -d nssdb \
+ -f nssdb/password.txt \
+ -z nssdb/noise.bin \
+ -s "CN=CA Signing Certificate,OU=pki-tomcat,O=EXAMPLE" \
+ -o nssdb/ca_signing.csr.der \
+ -k ca_signing \
+ -g 2048 \
+ -Z SHA256 \
+ -2 \
+ --keyUsage critical,certSigning,crlSigning,digitalSignature,nonRepudiation
+
+openssl req -inform der -in nssdb/ca_signing.csr.der -out nssdb/ca_signing.csr