https://aznot.com/index.php?action=history&feed=atom&title=Template%3AMakecert.sh
Template:Makecert.sh - Revision history
2026-05-17T11:43:15Z
Revision history for this page on the wiki
MediaWiki 1.41.0
https://aznot.com/index.php?title=Template:Makecert.sh&diff=2246&oldid=prev
Kenneth at 14:54, 25 May 2015
2015-05-25T14:54:54Z
<p></p>
<p><b>New page</b></p><div>Linux script to generate custom self signed certificate<br />
<br />
makecert.sh:<br />
<pre><br />
#!/bin/sh<br />
<br />
# ./makecert.sh <domain><br />
if [ "$1" = "" ] ; then<br />
echo "Error: Usage: $0 <domain> \"[cert-domain]\""<br />
exit 1<br />
fi<br />
DOMAIN=$1<br />
if [ "$2" != "" ] ; then<br />
CERTDOMAIN=$2<br />
else<br />
CERTDOMAIN=$1<br />
fi<br />
echo "Creating SSL cert for $DOMAIN ($CERTDOMAIN)"<br />
<br />
mkdir $1<br />
cd $1<br />
# openssl req -config ../openssl.cnf -new -out $DOMAIN.csr<br />
# openssl req -new -out $DOMAIN.csr<br />
openssl req -new -out $DOMAIN.csr -passout pass:test <<EOF<br />
US<br />
Utah<br />
Salt Lake City<br />
$DOMAIN<br />
$DOMAIN<br />
$CERTDOMAIN<br />
<br />
<br />
<br />
EOF<br />
# openssl rsa -in privkey.pem -out $DOMAIN.key<br />
openssl rsa -in privkey.pem -out $DOMAIN.key -passin pass:test<br />
openssl x509 -in $DOMAIN.csr -out $DOMAIN.cert -req -signkey $DOMAIN.key -days 1825 # 5 years<br />
openssl x509 -in $DOMAIN.cert -out $DOMAIN.der.crt -outform DER # optional<br />
cat $DOMAIN.key $DOMAIN.cert > $DOMAIN.pem<br />
# FYI, pem for chain would be 'key, cert, chain > pem'<br />
</pre><br />
<br />
See [[openssl.cnf]]<br />
<br />
[[Category:Linux]]<br />
[[Category:SSL Certificates]]<br />
[[Category:openssl]]</div>
Kenneth