summaryrefslogtreecommitdiffstats
path: root/scripts/nssdb-kra_storage-request.sh
blob: c4f3c2b7d465fe0342802e87ba62f164ea6c454a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
#!/bin/sh

certutil -R \
 -d nssdb \
 -f nssdb/password.txt \
 -z nssdb/noise.bin \
 -s "CN=DRM Storage Certificate,OU=pki-tomcat,O=EXAMPLE" \
 -o nssdb/kra_storage.csr.der \
 -k rsa \
 -g 2048 \
 -Z SHA256 \
 --keyUsage critical,dataEncipherment,keyEncipherment,digitalSignature,nonRepudiation \
 --extKeyUsage clientAuth

openssl req -inform der -in nssdb/kra_storage.csr.der -out nssdb/kra_storage.csr