summaryrefslogtreecommitdiffstats
path: root/scripts/nssdb-nfast-csr.sh
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-07-20 07:30:37 +0200
committerEndi S. Dewata <edewata@redhat.com>2017-07-20 07:30:37 +0200
commitcc84991f7ebf911d3b5303738c84d6778accc537 (patch)
treee2a80008548fe8dc308468dc2e28b22daba4b4dd /scripts/nssdb-nfast-csr.sh
parentd2cc01d76e69f8d3602c5181263b95cbcd1c79a3 (diff)
downloadpki-dev-cc84991f7ebf911d3b5303738c84d6778accc537.tar.gz
pki-dev-cc84991f7ebf911d3b5303738c84d6778accc537.tar.xz
pki-dev-cc84991f7ebf911d3b5303738c84d6778accc537.zip
Added NSS database scripts.
Diffstat (limited to 'scripts/nssdb-nfast-csr.sh')
-rwxr-xr-xscripts/nssdb-nfast-csr.sh25
1 files changed, 25 insertions, 0 deletions
diff --git a/scripts/nssdb-nfast-csr.sh b/scripts/nssdb-nfast-csr.sh
new file mode 100755
index 0000000..e23557a
--- /dev/null
+++ b/scripts/nssdb-nfast-csr.sh
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+OUTPUT=ca_signing.csr
+
+echo -e "y\n\ny\n" | \
+ certutil -R \
+ -d nssdb \
+ -h edewata \
+ -f password.txt \
+ -s "CN=CA Signing Certificate,O=EXAMPLE" \
+ -z nssdb/noise.bin \
+ -k rsa \
+ -g 2048 \
+ -Z SHA512 \
+ -2 \
+ --keyUsage digitalSignature,nonRepudiation,certSigning,crlSigning,critical \
+ -o ca.csr.der
+
+BtoA ca.csr.der ca.csr.pem
+echo "-----BEGIN NEW CERTIFICATE REQUEST-----" > $OUTPUT
+cat ca.csr.pem >> $OUTPUT
+echo "-----END NEW CERTIFICATE REQUEST-----" >> $OUTPUT
+
+rm ca.csr.der
+rm ca.csr.pem