Openssl generate certificates

generate.sh

#!/bin/bash -x

KEY_SIZE=4096
DAYS=3650


# CA

if [ ! -f ca.crt ]; then
    openssl genrsa $KEY_SIZE > ca.key
    
    openssl req -new -x509 -nodes -days $DAYS \
        -subj /C=PL/ST=State/L=City/O=Organization/OU=Developer/CN=my.domain.com \
        -key ca.key \
        -out ca.crt
fi


# crt

if [ ! -f server.crt ]; then
    openssl req -newkey rsa:$KEY_SIZE -nodes -days $DAYS \
        -subj /C=PL/ST=State/L=City/O=Organization/OU=Developer/CN=my.domain.com \
        -keyout server.key \
        -out server.req
    
    openssl x509 -req -days $DAYS -set_serial 01 \
        -in server.req \
        -out server.crt \
        -CA ca.crt \
        -CAkey ca.key
fi


# Verify

openssl verify \
    -CAfile ca.crt \
    ca.crt \
    server.crt