From adf63c891526f5d1b63c20ae0f20f46505ef9c3e Mon Sep 17 00:00:00 2001 From: "Gaunt, John" Date: Fri, 15 Feb 2019 11:02:29 -0500 Subject: [PATCH] Update csr.sh --- csr.sh | 34 ++++++++++++++++++++++++++++++++-- 1 file changed, 32 insertions(+), 2 deletions(-) diff --git a/csr.sh b/csr.sh index bfcf018..d8f1721 100644 --- a/csr.sh +++ b/csr.sh @@ -8,7 +8,7 @@ fi DOMAIN="home.johnhgaunt.com" for i in $HOSTNAMES; do - openssl req -new -sha512 -nodes -out $i.$DOMAIN.csr -newkey rsa:4096 -keyout $i.$DOMAIN.key -config <( + openssl req -new -sha512 -nodes -out $i.$DOMAIN.csr -newkey rsa:16384 -keyout $i.$DOMAIN.key -config <( cat <<-EOF [req] default_bits = 4096 @@ -34,4 +34,34 @@ DNS.1 = $i.$DOMAIN DNS.2 = $i EOF ) -done \ No newline at end of file +done + + +# ECDSA key and csr +: ' +openssl req -new -sha512 -nodes -newkey ec:<(openssl ecparam -name secp521r1) -keyout cert.key -out cert.csr -config <( +cat <<-EOF +[req] +prompt = no +default_md = sha512 +req_extensions = req_ext +distinguished_name = dn + +[ dn ] +C=US +ST=PA +L=Pittsburgh +O=Gaunt +OU=Gaunt +emailAddress=admin@johnhgaunt.com +CN=$i.$DOMAIN + +[ req_ext ] +subjectAltName = @alt_names + +[ alt_names ] +DNS.1 = $i.$DOMAIN +DNS.2 = $i +EOF +) +'' \ No newline at end of file