wwwX的数字证书脚本

botang

1. #!/bin/sh
   
2. 
   
3. 
   
4. #######################################################################
   
5. #
   
6. # generate signed ssl certs and keys for serverX.example.com
   
7. #
   
8. rm -f /etc/pki/tls/certs/www*.crt
   
9. # certs published at /var/ftp/pub/materials/tls/certs/serverX.crt
   
10. #
    
11. rm -f /etc/pki/tls/private/www*.key
    
12. # keys published at  /var/ftp/pub/materials/tls/private/serverX.key
    
13. #
    
14. rm -rf /var/ftp/pub/tls/certs/www*
    
15. rm -rf /var/ftp/pub/tls/private/www*
    
16. #######################################################################
    
17. 
    
18. SUBJ_PREFIX="/C=US/ST=North Carolina/L=Raleigh/O=Example, Inc."
    
19. DOMAIN="example.com"
    
20. 
    
21. PUBTLS=/var/ftp/pub/materials/tls
    
22. 
    
23. if [ -d $PUBTLS ]; then
    
24.         echo WARNING: the directory $PUBTLS already exists, which is
    
25.         echo probably not a good thing.  To completely regenerate
    
26.         echo student certs and keys, first remove the directory
    
27.         echo $PUBTLS, then run this script.
    
28.         echo
    
29.         echo Bravely venturing on...
    
30. fi
    
31. 
    
32. mkdir -p $PUBTLS/{certs,private}
    
33. 
    
34. umask 077
    
35. pushd /etc/pki/tls/certs
    
36. 
    
37. for i in $(seq 20); do
    
38. 
    
39.         SERVER=www$i
    
40.         SUBJECT="$SUBJ_PREFIX/CN=$SERVER.$DOMAIN"
    
41.         KEY=../private/$SERVER.key
    
42. 
    
43.         if [ -e $KEY ]; then
    
44.                 echo "key for $SERVER already exists.  skipping."
    
45.                 continue
    
46.         fi
    
47. 
    
48.         openssl req -new  -nodes -out $SERVER.csr -keyout $KEY -subj "$SUBJECT"
    
49. 
    
50.         openssl ca -batch -in $SERVER.csr -out $SERVER.crt
    
51. 
    
52.         ( cat $KEY; echo; cat $SERVER.crt ) > $SERVER.pem
    
53. 
    
54.         install -m 644 $SERVER.crt $SERVER.pem $PUBTLS/certs
    
55.         install -m 644 $KEY $PUBTLS/private
    
56. 
    
57.         rm -f $SERVER.csr
    
58. done
    
59. popd
    
60. 
    
61. cp -rp /etc/pki/tls/certs/www*  /var/ftp/pub/tls/certs/
    
62. cp -rp /etc/pki/tls/private/www* /var/ftp/pub/tls/private/
    
63. chmod 644 /var/ftp/pub/tls/certs/*
    
64. chmod 644 /var/ftp/pub/tls/private/*
    
65. 
    

复制代码

huoshichong

没有人回复真不好，抢个沙发