summaryrefslogtreecommitdiffstats
path: root/scripts/nssdb-ca_signing-csr-restore.sh
blob: d1a7603de1f10b40e06832c254006ee1969777b5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
#!/bin/sh

echo -e "y\n\ny\n" | \
 certutil -R \
 -d nssdb \
 -f nssdb/password.txt \
 -z nssdb/noise.bin \
 -s "CN=CA Signing Certificate,OU=pki-tomcat,O=EXAMPLE" \
 -o nssdb/ca_signing.csr.der \
 -k ca_signing \
 -g 2048 \
 -Z SHA256 \
 -2 \
 --keyUsage critical,certSigning,crlSigning,digitalSignature,nonRepudiation

openssl req -inform der -in nssdb/ca_signing.csr.der -out nssdb/ca_signing.csr