253 lines
6.4 KiB
Text
253 lines
6.4 KiB
Text
#!/dev/null
|
|
|
|
|
|
|
|
|
|
::// tls / ...
|
|
|
|
|
|
|
|
|
|
<< tls / generate / all
|
|
|
|
test "${#}" -eq 0
|
|
|
|
"${ZRUN}" ':: tls / generate / self-signed'
|
|
"${ZRUN}" ':: tls / generate / testing / ca'
|
|
"${ZRUN}" ':: tls / generate / testing / server'
|
|
"${ZRUN}" ':: tls / generate / testing / client'
|
|
!!
|
|
|
|
|
|
|
|
|
|
<< tls / generate / self-signed
|
|
|
|
test "${#}" -eq 0
|
|
|
|
for _type in rsa:sha256 ed25519:sha512 ; do
|
|
|
|
_hash="${_type#*:}"
|
|
_type="${_type%:*}"
|
|
|
|
certtool \
|
|
--generate-privkey \
|
|
--key-type "${_type}" \
|
|
--sec-param medium \
|
|
--pkcs8 \
|
|
--pkcs-cipher aes-128 \
|
|
--password '' \
|
|
--outfile "./examples/tls/${_type}/self-signed--${_type}--private-key.pem" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
certtool \
|
|
--generate-self-signed \
|
|
--hash "${_hash}" \
|
|
--pkcs8 \
|
|
--password '' \
|
|
--load-privkey "./examples/tls/${_type}/self-signed--${_type}--private-key.pem" \
|
|
--outfile "./examples/tls/${_type}/self-signed--${_type}--certificate.pem" \
|
|
--template "./examples/tls/conf/self-signed--any--certificate.conf" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
cat -- \
|
|
"./examples/tls/${_type}/self-signed--${_type}--certificate.pem" \
|
|
"./examples/tls/${_type}/self-signed--${_type}--private-key.pem" \
|
|
>| "./examples/tls/${_type}/self-signed--${_type}--bundle.pem" \
|
|
#
|
|
|
|
openssl pkcs12 \
|
|
-export \
|
|
-name bundle \
|
|
-password pass:bundle \
|
|
-des3 -descert -macalg sha1 \
|
|
-in "./examples/tls/${_type}/self-signed--${_type}--bundle.pem" \
|
|
-out "./examples/tls/${_type}/self-signed--${_type}--bundle.p12" \
|
|
#
|
|
|
|
done
|
|
!!
|
|
|
|
|
|
|
|
|
|
<< tls / generate / testing / ca
|
|
|
|
test "${#}" -eq 0
|
|
|
|
for _type in rsa:sha256 ed25519:sha512 ; do
|
|
_hash="${_type#*:}"
|
|
_type="${_type%:*}"
|
|
|
|
certtool \
|
|
--generate-privkey \
|
|
--key-type "${_type}" \
|
|
--sec-param medium \
|
|
--pkcs8 \
|
|
--pkcs-cipher aes-128 \
|
|
--password '' \
|
|
--outfile "./examples/tls/${_type}/testing--ca--${_type}--private-key.pem" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
certtool \
|
|
--generate-self-signed \
|
|
--hash "${_hash}" \
|
|
--pkcs8 \
|
|
--password '' \
|
|
--load-privkey "./examples/tls/${_type}/testing--ca--${_type}--private-key.pem" \
|
|
--outfile "./examples/tls/${_type}/testing--ca--${_type}--certificate.pem" \
|
|
--template "./examples/tls/conf/testing--ca--any--certificate.conf" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
done
|
|
|
|
cat -- \
|
|
"./examples/tls/rsa/testing--ca--rsa--certificate.pem" \
|
|
"./examples/tls/ed25519/testing--ca--ed25519--certificate.pem" \
|
|
>| "./examples/tls/testing--ca.pem" \
|
|
#
|
|
!!
|
|
|
|
|
|
|
|
|
|
<< tls / generate / testing / server
|
|
|
|
test "${#}" -eq 0
|
|
|
|
for _type in rsa:sha256 ed25519:sha512 ; do
|
|
_hash="${_type#*:}"
|
|
_type="${_type%:*}"
|
|
|
|
certtool \
|
|
--generate-privkey \
|
|
--key-type "${_type}" \
|
|
--sec-param medium \
|
|
--pkcs8 \
|
|
--pkcs-cipher aes-128 \
|
|
--password '' \
|
|
--outfile "./examples/tls/${_type}/testing--server--${_type}--private-key.pem" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
certtool \
|
|
--generate-request \
|
|
--hash "${_hash}" \
|
|
--pkcs8 \
|
|
--password '' \
|
|
--load-privkey "./examples/tls/${_type}/testing--server--${_type}--private-key.pem" \
|
|
--outfile "./examples/tls/${_type}/testing--server--${_type}--request.pem" \
|
|
--template "./examples/tls/conf/testing--server--any--certificate.conf" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
certtool \
|
|
--generate-certificate \
|
|
--hash "${_hash}" \
|
|
--pkcs8 \
|
|
--password '' \
|
|
--load-ca-privkey "./examples/tls/${_type}/testing--ca--${_type}--private-key.pem" \
|
|
--load-ca-certificate "./examples/tls/${_type}/testing--ca--${_type}--certificate.pem" \
|
|
--load-request "./examples/tls/${_type}/testing--server--${_type}--request.pem" \
|
|
--outfile "./examples/tls/${_type}/testing--server--${_type}--certificate.pem" \
|
|
--template "./examples/tls/conf/testing--server--any--certificate.conf" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
cat -- \
|
|
"./examples/tls/${_type}/testing--server--${_type}--certificate.pem" \
|
|
"./examples/tls/${_type}/testing--ca--${_type}--certificate.pem" \
|
|
"./examples/tls/${_type}/testing--server--${_type}--private-key.pem" \
|
|
>| "./examples/tls/${_type}/testing--server--${_type}--bundle.pem" \
|
|
#
|
|
|
|
openssl pkcs12 \
|
|
-export \
|
|
-name bundle \
|
|
-password pass:bundle \
|
|
-des3 -descert -macalg sha1 \
|
|
-in "./examples/tls/${_type}/testing--server--${_type}--bundle.pem" \
|
|
-out "./examples/tls/${_type}/testing--server--${_type}--bundle.p12" \
|
|
#
|
|
|
|
done
|
|
!!
|
|
|
|
|
|
|
|
|
|
<< tls / generate / testing / client
|
|
|
|
test "${#}" -eq 0
|
|
|
|
for _type in rsa:sha256 ed25519:sha512 ; do
|
|
_hash="${_type#*:}"
|
|
_type="${_type%:*}"
|
|
|
|
certtool \
|
|
--generate-privkey \
|
|
--key-type "${_type}" \
|
|
--sec-param medium \
|
|
--pkcs8 \
|
|
--pkcs-cipher aes-128 \
|
|
--password '' \
|
|
--outfile "./examples/tls/${_type}/testing--client--${_type}--private-key.pem" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
certtool \
|
|
--generate-request \
|
|
--hash "${_hash}" \
|
|
--pkcs8 \
|
|
--password '' \
|
|
--load-privkey "./examples/tls/${_type}/testing--client--${_type}--private-key.pem" \
|
|
--outfile "./examples/tls/${_type}/testing--client--${_type}--request.pem" \
|
|
--template "./examples/tls/conf/testing--client--any--certificate.conf" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
certtool \
|
|
--generate-certificate \
|
|
--hash "${_hash}" \
|
|
--pkcs8 \
|
|
--password '' \
|
|
--load-ca-privkey "./examples/tls/${_type}/testing--ca--${_type}--private-key.pem" \
|
|
--load-ca-certificate "./examples/tls/${_type}/testing--ca--${_type}--certificate.pem" \
|
|
--load-request "./examples/tls/${_type}/testing--client--${_type}--request.pem" \
|
|
--outfile "./examples/tls/${_type}/testing--client--${_type}--certificate.pem" \
|
|
--template "./examples/tls/conf/testing--client--any--certificate.conf" \
|
|
--no-text \
|
|
2> /dev/null \
|
|
#
|
|
|
|
cat -- \
|
|
"./examples/tls/${_type}/testing--client--${_type}--certificate.pem" \
|
|
"./examples/tls/${_type}/testing--ca--${_type}--certificate.pem" \
|
|
"./examples/tls/${_type}/testing--client--${_type}--private-key.pem" \
|
|
>| "./examples/tls/${_type}/testing--client--${_type}--bundle.pem" \
|
|
#
|
|
|
|
openssl pkcs12 \
|
|
-export \
|
|
-name bundle \
|
|
-password pass:bundle \
|
|
-des3 -descert -macalg sha1 \
|
|
-in "./examples/tls/${_type}/testing--client--${_type}--bundle.pem" \
|
|
-out "./examples/tls/${_type}/testing--client--${_type}--bundle.p12" \
|
|
#
|
|
|
|
done
|
|
!!
|
|
|