Page History

@rem Specify key name used for file names
set key_name=signing
 
@rem Create Private Key
openssl ecparam -genkey -name secp384r1 -out %key_name%.key
 
@rem Create Certificate Signing Request Request
openssl req -new -sha512 -nodes ^
    -key %key_name%.key ^
    -out %key_name%.csr ^
    -subj "/C=DE/ST=Berlin/L=Berlin/O=SOS/OU=IT/CN=%key_name%"

@rem Specify key name used for file names
set key_name=signing
 
@rem Create Certificate
set user_crt_tmp_file=user-crt-%RANDOM%.tmp
copy /Y NUL %user_crt_tmp_file%
echo keyUsage=critical,nonRepudiation,digitalSignature >> %user_crt_tmp_file%  
echo extendedKeyUsage=critical,codeSigning >> %user_crt_tmp_file%

 openssl x509 -req -sha512 -days 3652 ^
    -signkey %key_name%.key ^
    -in %key_name%.csr ^
    -out %key_name%.crt ^
    -extfile %user_crt_tmp_file%

del /q %user_crt_tmp_file%

@rem Specify key name used for file names
set ca_key_name=signing-ca
 
@rem Create Private Key
openssl ecparam -genkey -name secp384r1 -out %ca_key_name%.key
 
@rem Create Certificate Signing Request Request
openssl req -new -sha512 -nodes ^
    -key %ca_key_name%.key ^
    -out %ca_key_name%.csr ^
    -subj "/C=DE/ST=Berlin/L=Berlin/O=SOS/OU=IT/CN=%ca_key_name%"

@rem Specify key name used for file names
set ca_key_name=signing-ca
 
@rem Create Certificate
set ca_crt_tmp_file=ca-crt-%RANDOM%.tmp
copy /Y NUL %ca_crt_tmp_file%
echo basicConstraints=CA:TRUE >> %ca_crt_tmp_file%
echo keyUsage=critical,nonRepudiation,keyCertSign,cRLSign >> %ca_crt_tmp_file%

openssl x509 -req -sha512 -days 7305 ^
    -key %ca_key_name%.key ^
    -in %ca_key_name%.csr ^
    -out %ca_key_name%.crt ^
    -extfile %ca_crt_tmp_file%

del /q %ca_crt_tmp_file%

@rem Specify key name used for file names
set key_name=signing-ca
 
@rem Create Private Key
openssl ecparam -genkey -name secp384r1 -out %key_name%.key
 
@rem Create Certificate Signing Request Request
openssl req -new -sha512 -nodes ^
    -key %key_name%.key ^
    -out %key_name%.csr ^
    -subj "/C=DE/ST=Berlin/L=Berlin/O=SOS/OU=IT/CN=%key_name%"

@rem Specify key name used for file names
set key_name=signing
 
@rem Create Certificate
set user_crt_tmp_file=user-crt-%RANDOM%.tmp
copy /Y NUL %user_crt_tmp_file%
echo basicConstraints=CA:TRUE >> %user_crt_tmp_file%
echo keyUsage=critical,nonRepudiation,digitalSignature >> %user_crt_tmp_file%
echo extendedKeyUsage=critical,codeSigning >> %user_crt_tmp_file%

openssl x509 -req -sha512 -days 3652 ^
    -CA signing-ca.crt ^
    -CAkey signing-ca.key ^
    -CAcreateserial ^
    -in %key_name%.csr ^
    -out %key_name%.crt ^
    -extfile %user_crt_tmp_file%

del /q %user_crt_tmp_file%