aboutsummaryrefslogtreecommitdiff
path: root/scripts/generate-tls-cert.sh
diff options
context:
space:
mode:
authorToni Uhlig <matzeton@googlemail.com>2022-07-13 12:06:19 +0200
committerToni Uhlig <matzeton@googlemail.com>2023-01-17 22:03:00 +0100
commitac4c7390a36b15503cff0ce2ed78ba816c5c38e6 (patch)
tree14ec0b270bafb8ccd3babb2917d455764aa769c2 /scripts/generate-tls-cert.sh
parent5e313f43f956dd3a94c65529bad7a90d63c5a0e5 (diff)
Added TLS proxy support.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'scripts/generate-tls-cert.sh')
-rwxr-xr-xscripts/generate-tls-cert.sh17
1 files changed, 17 insertions, 0 deletions
diff --git a/scripts/generate-tls-cert.sh b/scripts/generate-tls-cert.sh
new file mode 100755
index 000000000..0dccbd054
--- /dev/null
+++ b/scripts/generate-tls-cert.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env sh
+
+set -e
+
+OUTDIR="$(dirname ${0})"
+
+printf 'Output directory: %s\n' "${OUTDIR}"
+
+printf 'encryption_key\nsigning_key' > template
+certtool --generate-privkey > "${OUTDIR}/client-key.pem"
+certtool --generate-certificate \
+ --template template \
+ --load-privkey "${OUTDIR}/client-key.pem" \
+ --load-ca-certificate "${OUTDIR}/ca-cert.pem" \
+ --load-ca-privkey "${OUTDIR}/ca-key.pem" \
+ --outfile "${OUTDIR}/client-cert.pem"
+rm template