#!/usr/bin/env bash

[ -d ssl ] || mkdir ssl
cd ssl

hostname=$(hostname)
lgtm_ssl=/home/vst/lgtm-stack/ssl
function request-certificate {
    type=$1
    scsr=$lgtm_ssl/$hostname.$type.csr
    scrt=$lgtm_ssl/$hostname.$type.crt

    openssl req -new -newkey rsa:2048 -nodes -keyout $type.key -out $type.csr -subj "/CN=$hostname.stuyckv.local"
    scp $type.csr vst@shion.stuyckv.local:$scsr

    ssh vst@shion.stuyckv.local openssl x509 -req -in $scsr -CA $lgtm_ssl/ca.crt -CAkey $lgtm_ssl/ca.key -CAcreateserial -out $scrt -days 365
    scp vst@shion.stuyckv.local:$scrt $type.crt
    rm $type.csr
}

request-certificate client
request-certificate server
# openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/CN=$(hostname).stuyckv.local"
# openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 365

cd ..

sudo chown -R 10001:10001 ./ssl