easy-rsa CA shorthand script

certgen.sh

#!/bin/bash

# first initialize easyrsa root keys and certificates:
# easyrsa3/easyrsa init-pki
# easyrsa3/easyrsa build-ca

# USAGE: ./certgen.sh <domainname>
easyrsa gen-req $1
easyrsa3/easyrsa gen-req $1
easyrsa3/easyrsa sign-req server $1
openssl rsa -in /home/finwe/ca/pki/private/$1.key -out /home/finwe/ca/pki/private/$1.nopass.key

echo "ssl_certificate     /home/finwe/ca/pki/issued/$1.crt;"
echo "ssl_certificate_key /home/finwe/ca/pki/private/$1.nopass.key;"