文件操作 - genSslCert.sh

文件: /usr/share/sfcb/genSslCert.sh

编辑文件内容

#!/bin/sh
TARGETDIR=${1:-.}
HOSTNAME=`uname -n`
DO_SERVER=yes
DO_CLIENT=yes
DIR=`mktemp -d /var/tmp/sfcb.XXXXXX` || exit 1

trap "rm -rf $DIR" exit

echo "Generating SSL certificates in $TARGETDIR"

if [ -f $TARGETDIR/server.pem ]
then
    echo "WARNING: server.pem SSL Certificate file already exists."
    echo "         old file will be kept intact."
    DO_SERVER=no
fi

if [ -f $TARGETDIR/client.pem ]
then
    echo "WARNING: client.pem SSL Certificate trust store already exists."
    echo "         old file will be kept intact."
    DO_CLIENT=no
fi

if [ $DO_SERVER = no -a $DO_CLIENT = no ]
then
    exit 0
fi

cat > $DIR/ssl.cnf <<EOF
[req]
distinguished_name=user_dn
prompt=no

[user_dn]
CN=$HOSTNAME
emailAddress=root@$HOSTNAME
EOF

openssl req -x509 -days 365 -newkey rsa:2048 \
   -nodes -config $DIR/ssl.cnf   \
   -keyout $DIR/key.pem -out $DIR/cert.pem

chmod 700 $DIR/*.pem

if [ $DO_SERVER = yes ]
then
    cp $DIR/cert.pem $TARGETDIR/server.pem
    cp $DIR/cert.pem $TARGETDIR/clist.pem
    cp $DIR/key.pem $TARGETDIR/file.pem
    chmod 400 $TARGETDIR/server.pem $TARGETDIR/file.pem $TARGETDIR/clist.pem
fi

if [ $DO_CLIENT = yes ]
then
    cp $DIR/cert.pem $TARGETDIR/client.pem
    chmod 400 $TARGETDIR/client.pem
fi

文件操作 - genSslCert.sh

文件: /usr/share/sfcb/genSslCert.sh

编辑文件内容

修改文件时间

删除文件