#!/bin/sh

certutil -R \
 -d ~/.dogtag/nssdb \
 -f password.txt \
 -s "CN=CA Signing Certificate,O=EXAMPLE" \
 -z noise.bin \
 -o ca.csr \
 -a

#rm -rf nssdb
#mkdir nssdb
#echo Secret123 > nssdb/password.txt
#certutil -N -d nssdb -f nssdb/password.txt
#openssl rand -out nssdb/noise.bin 2048

#certutil -R \
# -d nssdb \
# -f nssdb/password.txt \
# -s "CN=CA Signing Certificate,O=EXAMPLE" \
# -z nssdb/noise.bin \
# -o nssdb/ca.csr.der

#BtoA nssdb/ca.csr.der nssdb/ca.csr.pem
#echo "-----BEGIN NEW CERTIFICATE REQUEST-----" > nssdb/ca.csr
#cat nssdb/ca.csr.pem >> nssdb/ca.csr
#echo "-----END NEW CERTIFICATE REQUEST-----" >> nssdb/ca.csr
#rm nssdb/ca.csr.der
#rm nssdb/ca.csr.pem