Update gen-cert.sh

Generating Self-Sign Certificates for server SSL

Author: saurabharch

gen-cert.sh

@@ -1,62 +1,70 @@
 #!/bin/bash
 
-#Required
-domain=$1
-commonname=$domain
-
-#Change to your company details
-country=IN
-state=Bihar
-locality=Patna
-organization=raindigi.com
-organizationalunit=Engineering
-[email protected]
-
-#Optional
-password=SecretePassword
-
-if [ -z "$domain" ]
-then
-    echo "Argument not present."
-    echo "Useage $0 [common name]"
+# Required
+domain="localhost"
+commonname="$domain"
+
+# Change to your company details
+country="IN"
+state="Bihar"
+locality="patna"
+organization="rollout.io"
+organizationalunit="Engineering"
+email="[email protected]"
 
+# Optional
+password="SecretePassword"
+
+if [ -z "$domain" ]; then
+    echo "Argument not present."
+    echo "Usage $0 [common name]"
     exit 99
 fi
 
 echo "Generating key request for $domain"
 
 # Generate SSL/TLS certificates (valid for 365 days)
-
-# openssl req -new -key ./certs/key.pem -out ./certs/csr.pem
-openssl genrsa -out ./etc/ssl/certs/$domain-key.pem
-
-echo "Creating CSR"
-openssl req -new -key certs/$domain.pem -out certs/$domain-csr.pem -passin pass:$password \
+mkdir -p certificates
+openssl genrsa -out "./certificates/$domain-key.pem" 2048
+openssl req -new -key "./certificates/$domain-key.pem" -out "./certificates/$domain-csr.pem" -passin pass:"$password" \
     -subj "/C=$country/ST=$state/L=$locality/O=$organization/OU=$organizationalunit/CN=$commonname/emailAddress=$email"
 
-openssl x509 -req -days 365 -in ./etc/ssl/certs/$domain-csr.pem -signkey ./etc/ssl/certs/$domain-key.pem -out ./etc/ssl/certs/$domain-cert.pem
+openssl x509 -req -days 365 -in "./certificates/$domain-csr.pem" -signkey "./certificates/$domain-key.pem" -out "./certificates/$domain-cert.pem"
 
-#Generate a key
-openssl genrsa -des3 -passout pass:$password -out ./etc/ssl/certs/$domain.key 2048 -noout
+# Generate a key
+openssl genrsa -des3 -passout pass:"$password" -out "./certificates/$domain.key" 2048
 
-#Remove passphrase from the key. Comment the line out to keep the passphrase
+# Remove passphrase from the key. Comment the line out to keep the passphrase
 echo "Removing passphrase from key"
-openssl rsa -in etc/ssl/certs/$domain.key -passin pass:$password -out etc/ssl/certs/$domain.key
+openssl rsa -in "./certificates/$domain.key" -passin pass:"$password" -out "./certificates/$domain.key"
 
-#Create the request
+# Create the request
 echo "Creating CSR"
-openssl req -new -key ./etc/ssl/certs/$domain.key -out ./etc/ssl/certs/$domain.csr -passin pass:$password \
+openssl req -new -key "./certificates/$domain.key" -out "./certificates/$domain.csr" -passin pass:"$password" \
     -subj "/C=$country/ST=$state/L=$locality/O=$organization/OU=$organizationalunit/CN=$commonname/emailAddress=$email"
 
+# Generate certificate
+openssl x509 -req -days 365 -in "./certificates/$domain-csr.pem" -signkey "./certificates/$domain.key" -out "./certificates/$domain-cert.pem"
+
+# Rename the certificate file to have a .crt extension
+mv "./certificates/$domain-cert.pem" "./certificates/$domain.crt"
+
 echo "---------------------------"
 echo "-----Below is your CSR-----"
 echo "---------------------------"
 echo
-cat etc/ssl/certs/$domain.csr
+cat "./certificates/$domain-csr.pem"
 
 echo
 echo "---------------------------"
 echo "-----Below is your Key-----"
 echo "---------------------------"
 echo
-cat ./etc/ssl/certs/$domain.key
+cat "./certificates/$domain.key"
+
+echo
+echo "---------------------------"
+echo "-----Below is your CRT-----"
+echo "---------------------------"
+echo
+cat "./certificates/$domain.crt"