Page History

# Specify key name used for file names
key_name=signing

# GenerateCreate Private Key and Certificate
# openssl req -sha256 -newkey rsa:4096 -keyout "${key_name}".key -passout pass:

# Create Certificate Signing Request (CSR)
openssl req -x509new -sha256 -newkey rsa:4096 -sha256 -nodes \
    -config <(printf "\n[ req ]\nprompt=no\ndistinguished_name=standard dn\n\n[ standard dn]\ncountryName=DE\nstateOrProvinceName=Berlin\nlocalityName=Berlin\norganizationName=SOS\norganizationalUnitName=IT\ncommonName=${key_name}\n\n[ standard exts ]\nkeyUsage=critical,nonRepudiation,digitalSignature,keyEncipherment\nextendedKeyUsage=critical,codeSigning\n") \
	-keyout "${key_name}".key \
    -out "${key_name}.crt".csr

# Create and sign Certificate
openssl x509 -req -days 5475 \
    -signkey "${key_name}".key \
    -in "${key_name}".csr \
    -out "${key_name}".crt \
    -extfile <(printf "keyUsage=critical,nonRepudiation,digitalSignature,keyEncipherment\n\n\nextendedKeyUsage=critical,codeSigning\n" "${key_name}")