From 3d450f9e30b7bebd030d531f07e92ed2c154dca7 Mon Sep 17 00:00:00 2001
From: Jan Dittberner <jan@dittberner.info>
Date: Wed, 4 May 2011 22:23:49 +0200
Subject: [PATCH] scripts to sign SubCA, client and server certs

- signsub.sh to sign a sub CA with the root CA

- signclient.sh to sign client certificates with the Sub CA

- signserver.sh to sign server certificates with the Sub CA
---
 signclient.sh | 8 ++++++++
 signserver.sh | 8 ++++++++
 signsub.sh    | 8 ++++++++
 3 files changed, 24 insertions(+)
 create mode 100644 signclient.sh
 create mode 100644 signserver.sh
 create mode 100644 signsub.sh

diff --git a/signclient.sh b/signclient.sh
new file mode 100644
index 0000000..084fc24
--- /dev/null
+++ b/signclient.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <client-csr.csr.pem>"
+    exit 1
+fi
+
+openssl ca -config subca.conf -in "$1" -out "${1%%.csr.pem}.crt.pem" -extensions client_cert
diff --git a/signserver.sh b/signserver.sh
new file mode 100644
index 0000000..23ffb60
--- /dev/null
+++ b/signserver.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <server-csr.csr.pem>"
+    exit 1
+fi
+
+openssl ca -config subca.conf -in "$1" -out "${1%%.csr.pem}.crt.pem" -extensions server_cert
diff --git a/signsub.sh b/signsub.sh
new file mode 100644
index 0000000..7beadf4
--- /dev/null
+++ b/signsub.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <subca-request.csr.pem>"
+    exit 1
+fi
+
+openssl ca -config rootca.conf -in "$1" -out "${1%%.csr.pem}.crt.pem"