From 1cbf6fc8c9381f0835530dc0753f7c7af7502d88 Mon Sep 17 00:00:00 2001
From: "Endi S. Dewata" <edewata@redhat.com>
Date: Fri, 20 Oct 2017 21:30:52 +0200
Subject: Added NSSDB scripts.

---
 scripts/nssdb-ocsp_signing-request.sh | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100755 scripts/nssdb-ocsp_signing-request.sh

(limited to 'scripts/nssdb-ocsp_signing-request.sh')

diff --git a/scripts/nssdb-ocsp_signing-request.sh b/scripts/nssdb-ocsp_signing-request.sh
new file mode 100755
index 0000000..d6af7fe
--- /dev/null
+++ b/scripts/nssdb-ocsp_signing-request.sh
@@ -0,0 +1,17 @@
+#!/bin/sh
+
+certutil -R \
+ -d nssdb \
+ -f nssdb/password.txt \
+ -z nssdb/noise.bin \
+ -s "CN=OCSP Signing Certificate,OU=pki-tomcat,O=EXAMPLE" \
+ -o nssdb/ocsp_signing.csr.der \
+ -k rsa \
+ -g 2048 \
+ -Z SHA256 \
+ --extKeyUsage ocspResponder \
+ --extGeneric 1.3.6.1.5.5.7.48.1.5:not-critical:/dev/null
+
+openssl req -inform der -in nssdb/ocsp_signing.csr.der -out nssdb/ocsp_signing.csr
+
+openssl req -text -noout -in nssdb/ocsp_signing.csr
-- 
cgit