scripts/external-tinyca-sign.sh


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

#!/bin/sh

/usr/bin/openssl ca \
 -batch \
 -passin pass:Secret123 \
 -notext \
 -config /root/.TinyCA/RootCA/openssl.cnf \
 -name ca_ca \
 -in "ca_signing.csr" \
 -out "ca_signing.crt" \
 -days 7200 \
 -preserveDN \
 -md sha256 \
 -noemailDN

# -config external-tinyca.cnf \

/bin/cp /root/.TinyCA/RootCA/cacert.pem external.crt