From 323d81777d9ff9b057de2f98273c54283c4b2692 Mon Sep 17 00:00:00 2001 From: Dmitry Kasatkin Date: Wed, 15 Jan 2014 18:15:22 +0200 Subject: [PATCH] Script for generating self-signed certificate Signed-off-by: Dmitry Kasatkin --- examples/ima-genkey-self.sh | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100755 examples/ima-genkey-self.sh diff --git a/examples/ima-genkey-self.sh b/examples/ima-genkey-self.sh new file mode 100755 index 0000000..e293b94 --- /dev/null +++ b/examples/ima-genkey-self.sh @@ -0,0 +1,29 @@ +#!/bin/sh + +GENKEY=x509_evm.genkey + +cat << __EOF__ >$GENKEY +[ req ] +default_bits = 1024 +distinguished_name = req_distinguished_name +prompt = no +string_mask = utf8only +x509_extensions = myexts + +[ req_distinguished_name ] +O = `hostname` +CN = `whoami` signing key +emailAddress = `whoami`@`hostname` + +[ myexts ] +basicConstraints=critical,CA:FALSE +keyUsage=digitalSignature +subjectKeyIdentifier=hash +authorityKeyIdentifier=keyid +__EOF__ + +openssl req -x509 -new -nodes -utf8 -sha1 -days 3650 -batch -config $GENKEY \ + -outform DER -out x509_evm.der -keyout privkey_evm.pem + +openssl rsa -pubout -in privkey_evm.pem -out pubkey_evm.pem +