#!/bin/sh

openssl req -newkey rsa:2048 -keyout external.key -nodes -x509 -out external.crt -subj "/CN=External CA/O=EXTERNAL" -days 365

openssl x509 -req -in ca_signing.csr -CA external.crt -CAkey external.key -CAcreateserial -out ca_signing.crt

openssl crl2pkcs7 -nocrl -certfile external.crt -out cert_chain.p7b