scripts to sign SubCA, client and server certs

- signsub.sh to sign a sub CA with the root CA

- signclient.sh to sign client certificates with the Sub CA

- signserver.sh to sign server certificates with the Sub CA

signclient.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <client-csr.csr.pem>"
+    exit 1
+fi
+
+openssl ca -config subca.conf -in "$1" -out "${1%%.csr.pem}.crt.pem" -extensions client_cert

signserver.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <server-csr.csr.pem>"
+    exit 1
+fi
+
+openssl ca -config subca.conf -in "$1" -out "${1%%.csr.pem}.crt.pem" -extensions server_cert

signsub.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <subca-request.csr.pem>"
+    exit 1
+fi
+
+openssl ca -config rootca.conf -in "$1" -out "${1%%.csr.pem}.crt.pem"