make more clients

openssl.sh

@@ -6,13 +6,18 @@ set -u
 options="${1:-}"
 prefix="${2:-}"
 
+doserver=0
+doclient=0
+
 case "$options" in
-   server ) ;;
-   client ) ;;
-   all ) ;;
-   * ) echo "USAGE: $0 [all|server|client] file_prefix"; exit 1 ;;
+   server ) doserver=1 ;;
+   client ) doclient=1 ; cacrt="${3}"; cakey="${4}" ;;
+   all ) doserver=1; doclient=1 ;;
+   * ) echo "USAGE: $0 [all|server|client] file_prefix [server.crt server.key]"; exit 1 ;;
 esac
 
+###   CREATE SERVER STUFF  ###
+if ((doserver)); then
    cakey="$(mktemp)"
    cacrt="$(mktemp)"
 
@@ -27,7 +32,9 @@ echo '
    localhost
 
    ' | openssl req -nodes -new -x509 -days 365 -key $cakey -out $cacrt
+fi
 
+if ((doclient)); then
    clientkey="$(mktemp)"
    clientcsr="$(mktemp)"
    clientcrt="$(mktemp)"
@@ -47,10 +54,13 @@ localhost
    # self-signed
    echo 5
    openssl x509 -req -days 365 -in $clientcsr -CA $cacrt -CAkey $cakey -set_serial 01 -out $clientcrt
+fi
 
+if ((doserver)); then
    mv $cakey ./${prefix}server.key
    mv $cacrt ./${prefix}server.crt
+fi
+if ((doclient)); then
    mv $clientkey ./${prefix}client.key
-mv $clientcsr ./${prefix}client.csr
    mv $clientcrt ./${prefix}client.crt
-
+fi