29 lines
674 B
Nix
29 lines
674 B
Nix
|
{ writeShellScriptBin, openssl, ...}:
|
||
|
|
|
||
|
|
writeShellScriptBin "create_ssl" ''
|
||
|
|
set -e -o pipefail
|
||
|
|
name="''${1}"
|
||
|
|
root_key="''${2}"
|
||
|
|
|
||
|
|
function usage {
|
||
|
|
echo "USAGE: create_ssl <cert name> <root path>"
|
||
|
|
}
|
||
|
|
|
||
|
|
if [ -z "''${name}" ]; then
|
||
|
|
usage
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ -z "''${root_key}" ]; then
|
||
|
|
usage
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Create the certificate key
|
||
|
|
${openssl}/bin/openssl ecparam -out "''${name}.key" -name prime256v1 -genkey
|
||
|
|
# Create the CSR
|
||
|
|
${openssl}/bin/openssl req -name -sha256 -key "''${name}.key" -out "''${name}.csr"
|
||
|
|
# Sign it
|
||
|
|
${openssl}/bin/openssl x509 -req -in "''${name}.csr" -CA "''${root_key}.crt" -CAkey "''${root_key}.key" -CAcreateserial -out "''${name}.crt" -days 3650 -sha256
|
||
|
|
''
|