modify generate-certificate to get certs signed by shion

generate-certificates.sh

@@ -1,14 +1,28 @@
+#!/usr/bin/env bash
 
 [ -d ssl ] || mkdir ssl
 cd ssl
 
-# create root ca
+hostname=$(hostname)
-openssl req -x509 -newkey rsa:8192 -keyout ca.key -out ca.crt -days 36500 -nodes -subj "/CN=LGTM CA"
+lgtm_ssl=/home/vst/lgtm-stack/ssl
+function request-certificate {
+    type=$1
+    scsr=$lgtm_ssl/$hostname.$type.csr
+    scrt=$lgtm_ssl/$hostname.$type.crt
 
-openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/CN=$(hostname).stuyckv.local"
+    openssl req -new -newkey rsa:2048 -nodes -keyout $type.key -out $type.csr -subj "/CN=$hostname.stuyckv.local"
-openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 365
+    scp $type.csr vst@shion.stuyckv.local:$scsr
 
-sudo chown 10001:10001 ./server.key ./server.crt ./ca.crt
+    ssh vst@shion.stuyckv.local openssl x509 -req -in $scsr -CA $lgtm_ssl/ca.crt -CAkey $lgtm_ssl/ca.key -CAcreateserial -out $scrt -days 365
+    scp vst@shion.stuyckv.local:$scrt $type.crt
+    rm $type.csr
+}
+
+request-certificate client
+request-certificate server
+# openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/CN=$(hostname).stuyckv.local"
+# openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 365
 
-rm server.csr
 cd ..
+
+# sudo chown -R 10001:10001 ./ssl