Skip to content

Instantly share code, notes, and snippets.

@babelouest

babelouest/cert-extension.sh

Last active December 10, 2019 14:28
Show Gist options
  • Save babelouest/0c5076462d52f8ecf7c33c9862681687 to your computer and use it in GitHub Desktop.
Save babelouest/0c5076462d52f8ecf7c33c9862681687 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
cert-extension.sh
#!/bin/sh
certtool --generate-privkey --outfile packed.key --sec-param High
certtool --generate-request --load-privkey packed.key --outfile packed.csr --template template-ca.cfg
certtool --generate-self-signed --load-privkey packed.key --outfile packed.crt --template template-ca.cfg
certtool --generate-privkey --outfile client-p-v.key --key-type=ecdsa --sec-param High
certtool --generate-request --load-privkey client-p-v.key --outfile client-p-v.csr --template template-client.cfg
certtool --generate-certificate --load-request client-p-v.csr --load-ca-certificate packed.crt --load-ca-privkey packed.key --outfile client-p-v.crt --template template-client.cfg
Raw
template-ca.cfg
organization = "babelouest"
cn = "glewlwyd_packed_ca"
expiration_days = 700
ca
signing_key
encryption_key
cert_signing_key
Raw
template-client.cfg
organization = "babelouest"
unit = "Authenticator Attestation"
country = CA
cn = "glewlwyd_packed"
expiration_days = 350
signing_key
add_extension = "1.3.6.1.4.1.45724.1.1.4 octet_string(0x0410CD8C395C26EDEEDE653B00797D03CA3C)"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment