diff --git a/openssl.sh b/openssl.sh index 6bb8dbe..be706ec 100644 --- a/openssl.sh +++ b/openssl.sh @@ -29,6 +29,7 @@ if ((doserver)); then -subj "/C=US/ST=UT/O=breel/CN=${host}" \ -reqexts SAN -extensions SAN -config <(cat /etc/ssl/openssl.cnf \ <(printf "\n[SAN]\nsubjectAltName=DNS:${host},DNS:*.${host}")) + openssl pkcs12 -inkey $cakey -in $cacrt -export -out ${prefix}server.pkcs12 -passout pass:pass fi if ((doclient)); then @@ -47,6 +48,7 @@ if ((doclient)); then echo 5 openssl x509 -req -days 3650 -in $clientcsr -CA $cacrt -CAkey $cakey \ -set_serial 01 -out $clientcrt + openssl pkcs12 -inkey $clientkey -in $clientcrt -export -out ${prefix}client.pkcs12 -passout pass:pass rm $clientcsr fi diff --git a/thisserver.crt b/thisserver.crt new file mode 100644 index 0000000..47981ba --- /dev/null +++ b/thisserver.crt @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFJDCCAwygAwIBAgIJAI7WAaWIPkfGMA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV +BAYTAlVTMQswCQYDVQQIDAJVVDEOMAwGA1UECgwFYnJlZWwxEjAQBgNVBAMMCWxv +Y2FsaG9zdDAeFw0xOTAyMjgyMDMzMDFaFw0yOTAyMjUyMDMzMDFaMD4xCzAJBgNV +BAYTAlVTMQswCQYDVQQIDAJVVDEOMAwGA1UECgwFYnJlZWwxEjAQBgNVBAMMCWxv +Y2FsaG9zdDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK+ZsMTXjw8m +aWLFYt0m+fmop6643Zr6qXT0sCqlFInV8NwFNedzSvF5AkN6MGXray2JKLTevLnC +I9xf+Y8CxYKuTTeSfVz116BoGpuatCMP03+c9+WvykTELcuEYW07B6l1TDY2gYQ7 +o70d+lBqbwWC7oVrFD7B8+G7aZU6+St3xB5hdOCSgxGh26ag/wfUoEkCW9KVCs/Z +a+k/UGLLyIV9fgp6oFiEkQFznmtS31Z25L3CNYrWoKMTiQRvpiT2VgZuh2YuoNWw +vCraGW+AcupbGStw+L+cXgxL2RJN0/VZtlHkG1T1QhOd3aKibGsp8j8cta7FhVPC +HrtkrYzTuN7zowCY84snMf0rDrDqHiq9tlG2pR0/xaa+U4s/osO1DIecQf/hyNd5 +Vx957rTLPZqPfD+lepVwIhpULmso1pjYF0UdQnKfUA/pFpW//FBpg0aQLBWZyHiD +BxfwPg2U48oVWihJNup8+S6/4PBr2n7HKEVJR+5OS3tHaVkZnDZ31tZtWVcyKpzF +UDx2K3EqEs/JYXt0syUnVzrynNu5YyqYmGKz3PzOfZx9CAbBMcirmcR+rLeWRmRa +AhC1QDUCJjraByFG1EHLYPx4jkVnIAXsivfpdOPSTmC5OCE6+iEf80TbNPRHeNio +0kfIFe9qenk7a3LSDrt7StkzQ+1XGRVrAgMBAAGjJTAjMCEGA1UdEQQaMBiCCWxv +Y2FsaG9zdIILKi5sb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggIBAGvLD8obbHdG +wGTFWUevpbGPXVdgGbFp4/d03CkbYq3s9z/Xvqgl9suNMV+SCo1UEwpDtnhr4UdO +gwClYaS69fPU6L0XKr+/asCZL+VwDUszymN2Z/IIBZ89jR6ft/JBBqjvTvWBtPSs +6vqPbBT4r1i0u4Vvp2s8APiJI/gfBz8ESHlZr9BMJtxVAK8+3w32qfjwhVmQpW+G +3RNdlMSZ2PS3hOrhtp7memraNgDeZ9beI0TDrFSprRUrzBPeOee6hmcTHZKWqq1U +QLfocI6AcEpyxojtt/A86WbobIGNTkhrY+cYzfysm8oj7szxgGpyhpi3XjaMAihV +NGIq3QXSlJlfi7/WUpERE1edTu4Gs5tr6/+IWXVbRUExbsc6EeTJ27+udXwIzAuj +nDi9n0mYfsuV8j5xKMBC1+skG10otaUCZPTqaT0CRMPHa6yq8iLlBZNZa/PAaFSl +U5kbHFt/mlHpi8yfc91dUvXaWyAycesBuCXPZB4UHPJ9gRrUbRxNw7VjZuKtHJJT +FO/QYf3ISTTFW/tSRAC6r5aMNwVSnCKob1o7WUBOsFg4oU/KM1GiYgwWcd6QEoyQ +NdJrhs+9yEQ745bBN15wNmRbpSMGVlPCjqknasm+BJuds5IPEjEyaSmQc/Az0AXX +jS+2UOMHmzjP7Bgdxm2aJj96ET+WyLN3 +-----END CERTIFICATE----- diff --git a/thisserver.key b/thisserver.key new file mode 100644 index 0000000..f30f301 --- /dev/null +++ b/thisserver.key @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKQIBAAKCAgEAr5mwxNePDyZpYsVi3Sb5+ainrrjdmvqpdPSwKqUUidXw3AU1 +53NK8XkCQ3owZetrLYkotN68ucIj3F/5jwLFgq5NN5J9XPXXoGgam5q0Iw/Tf5z3 +5a/KRMQty4RhbTsHqXVMNjaBhDujvR36UGpvBYLuhWsUPsHz4btplTr5K3fEHmF0 +4JKDEaHbpqD/B9SgSQJb0pUKz9lr6T9QYsvIhX1+CnqgWISRAXOea1LfVnbkvcI1 +itagoxOJBG+mJPZWBm6HZi6g1bC8KtoZb4By6lsZK3D4v5xeDEvZEk3T9Vm2UeQb +VPVCE53doqJsaynyPxy1rsWFU8Ieu2StjNO43vOjAJjziycx/SsOsOoeKr22Ubal +HT/Fpr5Tiz+iw7UMh5xB/+HI13lXH3nutMs9mo98P6V6lXAiGlQuayjWmNgXRR1C +cp9QD+kWlb/8UGmDRpAsFZnIeIMHF/A+DZTjyhVaKEk26nz5Lr/g8GvafscoRUlH +7k5Le0dpWRmcNnfW1m1ZVzIqnMVQPHYrcSoSz8lhe3SzJSdXOvKc27ljKpiYYrPc +/M59nH0IBsExyKuZxH6st5ZGZFoCELVANQImOtoHIUbUQctg/HiORWcgBeyK9+l0 +49JOYLk4ITr6IR/zRNs09Ed42KjSR8gV72p6eTtrctIOu3tK2TND7VcZFWsCAwEA +AQKCAgEApfOpi13sZXT3w9CnTjm3pKovToCHbh/WZiGZG7RHZLw7lLOX7dSXzv19 +liez9Z42/CHTxpt54FQJcAuD3hPQdWAkuZBHycLMtVutScE63KfoSYIfBYLMtZBx +dxT0vjY7V3rzO4jnfgCfDet21OjBY4QJxy0bRPQnd/2WGuJQ+TOGtO+FdXcBR3ig +DSm527ymflksTidswGHKCfU8EyJjr0SaCW06fG1MXQLXhLYdO6nBI1SXJU8RIQ0l +QHwDmIr1Yb6zV25ZsZoFOrpDr4zFDZZqgxORAgTVHOnRi+rhlc3i8CGTcwcWG1Pm +Uf0OWXia5+pKCZHCHxYl1ROgsKam3vwqOrFCdqWVW+vWwTY6AahvokWDWeBiENQX +rXTZC1lnXrlD4SQQuEmCVWdCzJo68D1QEQzmBxbvgOQf5WCa6x7USiTxZUmvCWzy +2jDJ8bskfoRiYwOcYXNosfotycIA/Tyoxfc2ImTUywSZKTysJ8EFRQFQBLxIAjvD +k0m5+QLOY15VrlrK6tbbqufLHXgrPYJutf1krcV9zDdVyVVAqHV3474JBOXg02G7 +MO3AcOWEONKCfQ5+wUqmwFoYTFj/K/zCe3a1ChSNBYf1lPPF03ue0NBMLR78lm/E +G++Gk+AmrtjRwmxxzGr1snC7Oe0DVAfn/tbdB9f7Ye7rt8cnloECggEBAN/YnS1z +TXFje3rhTQi9b98lDkPP+x+CNDxpb20tLZMTVmD/cGBDDGzFmoR3pqZmmCGgHDU7 +cWOU592NrJm5UxVwU2V4Z/d9pUW0ZBqOqdDFwHMmTvsYQppiL8gJCrYU3witAadx +cUXsoWvM2l9UnuntiYxPjPPmGoKfJUy2yCJ49RPEwL5aC3KpyvqkFHHprTeoPWSO +ing2UOKd7SA9cxNyZOo3XS2WndeOIDiKN2oQA0M5wjrlUGF07F7KFA0X8cipsziN +QdmjVPfXGQ86dpclE1BC+uhuE0aoM5GlYE9X+yBVWP2MIb8NoTDl14zPm3q6V7PZ +pGxz8/OM50JgI98CggEBAMjS9RAeAE5CXXFGItF1qVWI896bEj0dN7CinNyM/yQ1 +70tiuWa7LWmSx8eI9hV3RabuZdkrjI0nDkYVTBTEeU27V5cjWD/o0p2USwaxS0/3 +8gFgFSksQTflO1cYn7z4UgcpmhmN0O2Ludz0v4XronBBQW5zKfL6UK7PTGm1V1Uj +QtfbTB4Ajom2PeJ4/VejD3drGtSUUo6s+fqxWwKnaagQqJWMN2hmuZfb1QmsiG+L +nQeezmaSrbDUhRYlBfg/qn+MapQxs6dP5fpJq4tNsGTdFDe6SUn+PP7aNpdENLfD +Xl2OvvEXRHNhuhK7yamyzD9JUNKRjI4ht4IwJr0ZX/UCggEAQgUALoSARb4CkDZc +4wQEN7sVHvj7ZsqfH2Y1X+zgMS2V31vXR/zecEJDlWg4tYEyw1AWobibc7RaQmTj +kB8xmvQbFKVTfJIJKarPj2meOh3o6c1VpAb+tcvZrdTE3PkA4u0rvLffobDt1v5/ +NXieuf2+AK0BtHmcPgQ0GxEZq9ki5yazdjDWiYX8gLnd8c7qsKylFsBXpKbYak4L +vuOAyi6GBvI3QBfZC9c2N5bESzrXy38AgyBY+bVjdX2CNm5meDlcy4QV9NuQVtyQ +3oXurhtYO+bVW7IDa2Z2dzFgW2ZmgZ3KdlVbKp8ZeHOBhF1CzQqijT/Wl8oHHEDl +gBUc3wKCAQEAqBN3KzAQzW7Zye4LQgcZ3A6tHEfo8eE8NMdERYp0F5hUWGGeDg7m +KQ/ByIwmeTzDvLyV3TaHgbOITLuSW2c8pwP+gO4B9Csl6uCsEkPcZmd70g7aZwU0 +6FUgXvqq5ntmG7yDzpNUoxtoSTdF/A2EfDMBUjFskIFTeZrhty8gko7aaNKPWCTb +JwKxtJPSZMCCN04avIQOvH6lEV3Sb9wxn4mhrtgVn3kqJ6DDIj+WSNUubaxJzqtA +V1jmsev2nRib1/hrUvBuDb/fGKUDv6kb0q79Ns7ge98eqaV0PxHElXAb0G2h/SGe +FntaQkeMtkyAiQ8RZ8qNOn+ZmIo4Qde06QKCAQBOL3yaWANUjy4uVn1+Mx0lvu8o +5AOwFzSE/clyawcqfv68WXKpXur+9VZMVrW6JV2Z+qFz40SSI+xMO5Fy0Vz3jnY2 +sTI//0FKX49TdCG1uqzva2aZHwKbipLHRBlGvoVMjt/3GeaggBgVOkLT3QP4TZU3 +57rPaOryvTBhWE3wnkRyR61nVWIuTbZH1Ana6V41I/0AVOyJ1UiyOiO63ry7S9XH +hFg1w5xWjZ4Eps7pTmpT3SXCBRXt5OzLpsn1WiEM4yn+rKcvgKk4nL4F4TG/nbRU +tF5LX10fC/JYPv4RfGHGnuO9yRXTN704JsUoVZWmxHIILugjl+PMbIMKhFL/ +-----END RSA PRIVATE KEY----- diff --git a/thisserver.pkcs12 b/thisserver.pkcs12 new file mode 100644 index 0000000..56a8486 Binary files /dev/null and b/thisserver.pkcs12 differ