#!/bin/bash

set -u

{

export LC_CTYPE=C

while getopts p:h opt

do

case "$opt" in

p) PROJECT_NAME="$OPTARG" ;; # Project Name

*)

echo >&2 "Usage: $0 -p projectname"

exit 1

;;

esac

done

: $PROJECT_NAME

[ -d "$PROJECT_NAME" ] && echo >&2 "FATAL: The project already exist" && exit 1

mkdir -p "$PROJECT_NAME"

cd "$PROJECT_NAME"

umask 377

< /dev/urandom tr -dc "+=\-%*\!&#':;{}()[]|^~\$_2-9T-Z" | head -c65 > ca.pass

# ca.key / ca.crt

openssl req \

-new -x509 -days ${CA_EXPIRE_DAYS:-"365"} \

-newkey rsa:4096 -keyout ca.key -passout file:ca.pass \

-out ca.crt -subj "/C=${CA_C:-"FR"}/L=${CA_L:-"Paris"}/O=${CA_O:-"Ekino"}/OU=${CA_OU:-"DevOps"}/CN=${CA_CN:-"$PROJECT_NAME"}"

umask 022

chmod 400 ca.key

chmod 444 ca.crt

echo

echo "The Certificate Authority files have been generated :"

echo " - key : '$PWD/ca.key'"

echo " - certificate : '$PWD/ca.crt' (self-signed) "

}