From 58ff485edbe4bb93ebc922d14df24247846132b6 Mon Sep 17 00:00:00 2001
From: Othmar Gsenger <otti@anytun.org>
Date: Mon, 3 Dec 2007 09:42:38 +0000
Subject: added ssl tools

---
 ssltools/easy-rsa/build-key-server | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100755 ssltools/easy-rsa/build-key-server

(limited to 'ssltools/easy-rsa/build-key-server')

diff --git a/ssltools/easy-rsa/build-key-server b/ssltools/easy-rsa/build-key-server
new file mode 100755
index 0000000..30dc41e
--- /dev/null
+++ b/ssltools/easy-rsa/build-key-server
@@ -0,0 +1,22 @@
+#!/bin/sh
+
+#
+# Make a certificate/private key pair using a locally generated
+# root certificate.
+#
+# Explicitly set nsCertType to server using the "server"
+# extension in the openssl.cnf file.
+
+if test $# -ne 1; then
+        echo "usage: build-key-server <name>";
+        exit 1
+fi                                                                             
+
+if test $KEY_DIR; then
+	cd $KEY_DIR && \
+	openssl req -days 3650 -nodes -new -keyout $1.key -out $1.csr -extensions server -config $KEY_CONFIG && \
+	openssl ca -days 3650 -out $1.crt -in $1.csr -extensions server -config $KEY_CONFIG && \
+        chmod 0600 $1.key
+else
+	echo you must define KEY_DIR
+fi
-- 
cgit v1.2.3