blob: ed37cfce37d0e0562c5ffdfd7367cc6339d5e9c0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
#!/bin/sh
certutil -R \
-d nssdb \
-f nssdb/password.txt \
-z nssdb/noise.bin \
-s "CN=Subsystem Certificate,OU=pki-tomcat,O=EXAMPLE" \
-o nssdb/subsystem.csr.der \
-k rsa \
-g 2048 \
-Z SHA256 \
--keyUsage critical,dataEncipherment,keyEncipherment,digitalSignature,nonRepudiation \
--extKeyUsage clientAuth,serverAuth
openssl req -inform der -in nssdb/subsystem.csr.der -out nssdb/subsystem.csr
|
