summaryrefslogtreecommitdiffstats
path: root/scripts/selfsign-sign.sh
blob: 14451758c776dcc2747b2a4a0f26389ec10cd648 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
#!/bin/sh

certutil -C -x \
 -d ~/.dogtag/nssdb \
 -f password.txt \
 -a -i ca.csr -o ca.crt \
 -c "CN=CA Signing Certificate,O=EXAMPLE" \
 -m $RANDOM \
 -v 240 \
 --keyUsage digitalSignature,nonRepudiation,certSigning,crlSigning,critical \
 -2 \
 -3 \
 --extSKID \
 --extAIA \
<< EOF
y

y
y
2d:7e:83:37:75:5a:fd:0e:8d:52:a3:70:16:93:36:b8:4a:d6:84:9f
0


2d:7e:83:37:75:5a:fd:0e:8d:52:a3:70:16:93:36:b8:4a:d6:84:9f

2
7
http://server.example.com:8080/ca/ocsp
0


EOF

certutil -A -d ~/.dogtag/nssdb -n testcert -i ca.crt -t "CTu,CTu,CTu"