1 files changed, 24 insertions, 0 deletions
diff --git a/scripts/ca_signing-generate-csr.sh b/scripts/ca_signing-generate-csr.sh
new file mode 100755
index 0000000..4ba7204
--- /dev/null
+++ b/scripts/ca_signing-generate-csr.sh
@@ -0,0 +1,24 @@
+#!/bin/sh
+
+echo -e "y\n\ny\n" | \
+ certutil -R \
+ -d nssdb \
+ -h internal \
+ -f nssdb/password.txt \
+ -z nssdb/noise.bin \
+ -s "CN=CA Signing Certificate,OU=pki-tomcat,O=EXAMPLE" \
+ -2 \
+ --keyUsage digitalSignature,nonRepudiation,certSigning,crlSigning,critical \
+ -o ca_signing.csr.der
+
+openssl req -inform der -in ca_signing.csr.der -out ca_signing.csr
+
+#BtoA ca_signing.csr.der ca_signing.csr.pem
+#echo "-----BEGIN NEW CERTIFICATE REQUEST-----" > ca_signing.csr
+#cat ca_signing.csr.pem >> ca_signing.csr
+#echo "-----END NEW CERTIFICATE REQUEST-----" >> ca_signing.csr
+
+rm ca_signing.csr.der
+#rm ca_signing.csr.pem
+
+openssl req -text -noout -in ca_signing.csr