summaryrefslogtreecommitdiff
path: root/openvpn/easy-rsa/Windows/build-key-pkcs12.bat
diff options
context:
space:
mode:
Diffstat (limited to 'openvpn/easy-rsa/Windows/build-key-pkcs12.bat')
-rw-r--r--openvpn/easy-rsa/Windows/build-key-pkcs12.bat10
1 files changed, 10 insertions, 0 deletions
diff --git a/openvpn/easy-rsa/Windows/build-key-pkcs12.bat b/openvpn/easy-rsa/Windows/build-key-pkcs12.bat
new file mode 100644
index 0000000..1fc083e
--- /dev/null
+++ b/openvpn/easy-rsa/Windows/build-key-pkcs12.bat
@@ -0,0 +1,10 @@
+@echo off
+cd %HOME%
+rem build a request for a cert that will be valid for ten years
+openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%
+rem sign the cert request with our ca, creating a cert/key pair
+openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%
+rem convert the key/cert and embed the ca cert into a pkcs12 file.
+openssl pkcs12 -export -inkey %KEY_DIR%\%1.key -in %KEY_DIR%\%1.crt -certfile %KEY_DIR%\ca.crt -out %KEY_DIR%\%1.p12
+rem delete any .old files created in this process, to avoid future file creation errors
+del /q %KEY_DIR%\*.old