From 478e1993e0760ad83668243111be155b3e9e7050 Mon Sep 17 00:00:00 2001
From: Joe Rayhawk <jrayhawk@omgwallhack.org>
Date: Sun, 27 Mar 2011 19:52:49 -0700
Subject: Initial content; missing some mailcert.sh support

---
 signcsr.sh | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100755 signcsr.sh

(limited to 'signcsr.sh')

diff --git a/signcsr.sh b/signcsr.sh
new file mode 100755
index 0000000..8074b39
--- /dev/null
+++ b/signcsr.sh
@@ -0,0 +1,35 @@
+#!/bin/bash
+# requires bash regexes
+
+SUPPLEMENTARY_CONFIG="$2"
+
+. ./configure.sh
+
+if ! [ -e "$1" ]; then
+  echo "Please provide a csr file as an argument."
+  echo "$0 [csrfile] (configfile)"
+  exit 2
+fi
+
+# bash doesn't like the (stuff|) construction, so we use (stuff|())
+if [[ "$1" =~ (.+/|())(.+) ]]; then # strip leading directories, if they exist
+  NAME="${BASH_REMATCH[3]}"
+  if [[ "$NAME" =~ (.+)\..* ]]; then # strip trailing suffix, if it exists
+    NAME="${BASH_REMATCH[1]}"
+  fi
+  echo Using "$NAME" as cert name.
+fi
+
+if [ $2 ]; then
+  export CA=$2
+fi
+  
+# Gen signed key
+mkdir -pv "$CA"/signed "$CA"/temp "$CA"/certs
+SERIAL=$(cat "$CA"/ca/"$CA".serial)
+openssl ca -config "$OPENSSL_CONFIG" -in "$1"
+if [ -e "$CA"/certs/"$SERIAL".pem ]; then # openssl lacks useful exit status codes, so we check to see if it actually did anything instead.
+  mv -i "$1" "$CA"/signed/$NAME.csr
+  ln "$CA"/certs/"$SERIAL".pem "$CA"/signed/"$1".crt # so we can find the certificate by name as well as serial
+  echo "Use ./mailcert.sh $NAME [emailaddress] to use sendmail to deliver the CA and user certificate."
+fi
-- 
cgit v1.2.3