mac/dot-local/bin/sign-with-own-ca

#!/bin/zsh
if ! [[ -r $1 ]]; then
	print "Usage: $0 path/to/request.csr" >&2
	exit 1
fi
ca=/etc/ssl/$HOST/root
sudo openssl x509 -req -CA $ca.crt -CAkey $ca.key -CAcreateserial -sha256 -days 30  -extensions v3_req -extfile /usr/local/etc/openssl/openssl.cnf -in $1 -out ${1:r}.crt
Add a simple script for self-signing CSRs with local trusted CA 2017-04-13 10:36:34 -04:00			`#!/bin/zsh`
			`if ! [[ -r $1 ]]; then`
			`print "Usage: $0 path/to/request.csr" >&2`
			`exit 1`
			`fi`
			`ca=/etc/ssl/$HOST/root`
Preserve v3 extensions when signing x.509 certificates - this is necessary for Subject Alternative Names to survive 2017-04-30 23:25:38 -04:00			`sudo openssl x509 -req -CA $ca.crt -CAkey $ca.key -CAcreateserial -sha256 -days 30 -extensions v3_req -extfile /usr/local/etc/openssl/openssl.cnf -in $1 -out ${1:r}.crt`