Lucas/env
1
0
Fork 0
Code Issues Pull Requests Releases Activity

gen-ec-cert: make encryption optional

Browse Source
This commit is contained in:
Lucas 2020-02-14 02:02:22 +00:00
parent f0505b1d11
commit f53179091a
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
utils/gen-ec-cert.sh
View File

@ -1,7 +1,7 @@
#!/bin/sh #!/bin/sh
usage() usage()
{ {
printf "Usage: %s [-c curve] [-d days] domain\n" "${0##*/}" >&2 printf "Usage: %s [-e] [-c curve] [-d days] domain\n" "${0##*/}" >&2
exit 1 exit 1
} }
@ -12,13 +12,16 @@ tonumber()
curve=secp384r1 curve=secp384r1
days=3650 days=3650
while getopts c:d: flag; do encrypt=
while getopts c:d:e flag; do
case $flag in case $flag in
c) [ -n "$OPTARG" ] || usage c) [ -n "$OPTARG" ] || usage
curve=$OPTARG curve=$OPTARG
;; ;;
d) days=$(tonumber "$OPTARG") || usage d) days=$(tonumber "$OPTARG") || usage
;; ;;
e) encrypt=yes
;;
*) usage *) usage
;; ;;
esac esac
@ -31,7 +34,7 @@ if [ -f "$domain.key" ]; then
printf "%s: key for %s already exists; reusing it.\n" \ printf "%s: key for %s already exists; reusing it.\n" \
"${0##*/}" "$domain" >&2 "${0##*/}" "$domain" >&2
else else
(umask 077 && openssl genpkey -aes256 \ (umask 077 && openssl genpkey ${encrypt:+-aes256} \
-algorithm ec -pkeyopt ec_paramgen_curve:"$curve" \ -algorithm ec -pkeyopt ec_paramgen_curve:"$curve" \
-out "$domain.key") -out "$domain.key")
if [ $? -ne 0 ] || [ ! -s "$domain.key" ]; then if [ $? -ne 0 ] || [ ! -s "$domain.key" ]; then