xref: /freebsd/crypto/openssl/demos/certs/apps/mkxcerts.sh (revision 3f0efe05432b1633991114ca4ca330102a561959)
1
2# Create certificates using various algorithms to test multi-certificate
3# functionality.
4
5OPENSSL=../../../apps/openssl
6CN="OpenSSL Test RSA SHA-1 cert" $OPENSSL req \
7	-config apps.cnf -extensions usr_cert -x509 -nodes \
8	-keyout tsha1.pem -out tsha1.pem -new -days 3650 -sha1
9CN="OpenSSL Test RSA SHA-256 cert" $OPENSSL req \
10	-config apps.cnf -extensions usr_cert -x509 -nodes \
11	-keyout tsha256.pem -out tsha256.pem -new -days 3650 -sha256
12CN="OpenSSL Test RSA SHA-512 cert" $OPENSSL req \
13	-config apps.cnf -extensions usr_cert -x509 -nodes \
14	-keyout tsha512.pem -out tsha512.pem -new -days 3650 -sha512
15
16# Create EC parameters
17
18$OPENSSL ecparam -name P-256 -out ecp256.pem
19$OPENSSL ecparam -name P-384 -out ecp384.pem
20
21CN="OpenSSL Test P-256 SHA-256 cert" $OPENSSL req \
22	-config apps.cnf -extensions ec_cert -x509 -nodes \
23	-nodes -keyout tecp256.pem -out tecp256.pem -newkey ec:ecp256.pem \
24	-days 3650 -sha256
25
26CN="OpenSSL Test P-384 SHA-384 cert" $OPENSSL req \
27	-config apps.cnf -extensions ec_cert -x509 -nodes \
28	-nodes -keyout tecp384.pem -out tecp384.pem -newkey ec:ecp384.pem \
29	-days 3650 -sha384
30