summaryrefslogtreecommitdiffstats
path: root/scripts/nssdb-kra_storage-request.sh
diff options
context:
space:
mode:
Diffstat (limited to 'scripts/nssdb-kra_storage-request.sh')
-rwxr-xr-xscripts/nssdb-kra_storage-request.sh15
1 files changed, 15 insertions, 0 deletions
diff --git a/scripts/nssdb-kra_storage-request.sh b/scripts/nssdb-kra_storage-request.sh
new file mode 100755
index 0000000..c4f3c2b
--- /dev/null
+++ b/scripts/nssdb-kra_storage-request.sh
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+certutil -R \
+ -d nssdb \
+ -f nssdb/password.txt \
+ -z nssdb/noise.bin \
+ -s "CN=DRM Storage Certificate,OU=pki-tomcat,O=EXAMPLE" \
+ -o nssdb/kra_storage.csr.der \
+ -k rsa \
+ -g 2048 \
+ -Z SHA256 \
+ --keyUsage critical,dataEncipherment,keyEncipherment,digitalSignature,nonRepudiation \
+ --extKeyUsage clientAuth
+
+openssl req -inform der -in nssdb/kra_storage.csr.der -out nssdb/kra_storage.csr