25 lines
1.1 KiB
Plaintext
25 lines
1.1 KiB
Plaintext
|
#!/usr/bin/bash
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
FQDN=`hostname`
|
||
|
|
# A >59 char FQDN means "root@FQDN" exceeds 64-char max length for emailAddress
|
||
|
|
if [ "x${FQDN}" = "x" -o ${#FQDN} -gt 59 ]; then
|
||
|
|
FQDN=localhost.localdomain
|
||
|
|
fi
|
||
|
|
|
||
|
|
sscg -q \
|
||
|
|
--cert-file /etc/pki/tls/certs/localhost.crt \
|
||
|
|
--cert-key-file /etc/pki/tls/private/localhost.key \
|
||
|
|
--ca-file /etc/pki/tls/certs/localhost-ca.crt \
|
||
|
|
--hash-alg sha256 \
|
||
|
|
--key-strength 2048 \
|
||
|
|
--lifetime 365 \
|
||
|
|
--country "--" \
|
||
|
|
--state SomeState \
|
||
|
|
--locality SomeCity \
|
||
|
|
--organization SomeOrganization \
|
||
|
|
--organizational-unit SomeOrganizationalUnit \
|
||
|
|
--hostname $FQDN \
|
||
|
|
--email root@$FQDN
|