Annotation of loncom/request_ssl_key.sh, revision 1.1
1.1 ! albertel 1: #!/bin/bash
! 2:
! 3: MAILADDR=certificate@lon-capa.org # Email the cert request here.
! 4: DESTDIR=/home/httpd/lonCerts # Destination for the key file.
! 5: DESTUID=www # Who will own the private key.
! 6: DESTGROUP=www # Gropu that owns the private key.
! 7:
! 8: openssl req -newkey rsa:1024 -passout pass:loncapa \
! 9: -keyout lonKey.enc -keyform PEM \
! 10: -out CertRequest.pem -outform PEM
! 11:
! 12: openssl rsa -passin pass:loncapa -in lonKey.enc -out lonKey.pem
! 13:
! 14: install -d -m 0750 -o $DESTUID -g $DESTGROUP $DESTDIR
! 15: install -m 0400 -o $DESTUID -g $DESTGROUP lonKey.pem $DESTDIR
! 16: rm lonKey.{enc,pem}
! 17:
! 18: mail <CertRequest.pem -s "Certificate Request" $MAILADDR
! 19: rm CertRequest.pem
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>