Création d'un certificat auto signé pour un domaine donné

create-cert

#!/bin/sh
#/usr/local/bin/create-cert

if [ -z "$1" ]; then
    echo "First parameter must be a domain"
    exit 1
fi

DOMAIN=$1
DIRECTORY=/data/www/$DOMAIN/ssl

if [ ! -d "$DIRECTORY" ]; then
    echo "$DIRECTORY is not a valid directory"
    exit 2
fi

echo "Deleting old keys"
rm -rf $DIRECTORY/{server.key,server.pem}

openssl req -x509 -days 365 -newkey rsa:2048 -keyout $DIRECTORY/server.key -nodes -out $DIRECTORY/server.pem
chmod 600 $DIRECTORY/*

echo "You can now add the following lines to your vhost"
echo " "
echo "SSLCertificateFile    $DIRECTORY/server.pem"
echo "SSLCertificateKeyFile $DIRECTORY/server.key"
echo " "

exit 0