| #!/bin/bash |
| |
| if [ $# -ne 2 ] |
| then |
| echo "Usage: $0 alias \"pass phrase\"" |
| exit -1 |
| fi |
| |
| # Generate a 2048 bit RSA key with public exponent 3. |
| # Encrypt private key with provided password. |
| openssl genrsa -3 -out $1.pem -passout pass:"$2" 2048 |
| |
| # Create a self-signed cert for this key. |
| openssl req -new -x509 -key $1.pem -passin pass:"$2" \ |
| -out $1-cert.pem \ |
| -batch -days 10000 |
| |
| # Create a PKCS12 store containing the generated private key. |
| # Protect the keystore and the private key with the provided password. |
| openssl pkcs12 -export -in $1-cert.pem -inkey $1.pem -passin pass:"$2" \ |
| -out $1.p12 -name $1 -passout pass:"$2" |
| |
| rm $1.pem |
| rm $1-cert.pem |
| |