Customizing SSL certificates

#!/bin/sh


# Create self-signed server certificate:


Read-p "Enter your domain [www.example.com]:" Domain


echo "Create root certificate key with password ..."


OpenSSL genrsa-des3-out $DOMAIN. Root.key 2048


echo "Create root certificate Signing request ..."
Org= "Wenxiaoyou (Beijing) Technology,co.,ltd"
subject= "/c=cn/st=beijing/l=beijing/o= $ORG/ou=itdept./cn= $DOMAIN"


OpenSSL req-new-subj $SUBJECT-key $DOMAIN. Root.key-out $DOMAIN. ROOT.CSR


echo "Remove password ..."


OpenSSL rsa-in $DOMAIN. Root.key-out $DOMAIN. Key


echo "Create server certificate signing request ..."
OpenSSL req-new-subj $SUBJECT-key $DOMAIN. Key-out $DOMAIN. SERVER.CSR


echo "Sign SSL Certificate ..."


OpenSSL x509-req-days 3650-in $DOMAIN. Root.csr-signkey $DOMAIN. Root.key-out $DOMAIN. root.crt
OpenSSL x509-req-days 3650-ca $DOMAIN. Root.crt-cakey $DOMAIN. key-cacreateserial-in $DOMAIN. server.csr-out $DOMAIN. S Erver.crt


echo "TODO:"
echo "Copy $DOMAIN. CRT to/etc/nginx/ssl/$DOMAIN. CRT"
echo "Copy $DOMAIN. Key to/etc/nginx/ssl/$DOMAIN. Key"
echo "ADD configuration in Nginx:"
echo "Server {"
echo "..."
echo "Listen 443 SSL;"
echo "ssl_certificate/etc/nginx/ssl/$DOMAIN. crt;"
echo "ssl_certificate_key/etc/nginx/ssl/$DOMAIN. Key;"
echo "}"