Subversion Repositories sysadmin_scripts

#! /usr/bin/env perl

use strict;
use warnings;

my $configFile = 'openssl.cnf'; # prototype for the domain specific config file

# they must pass in at least a domain. All other cli params taken as aliases
# this will also be the filename for each file created, ie $DOMAIN.extension
my $DOMAIN = shift;
die "Usage: $0 domain [alias alias]\n" unless $DOMAIN;

# if the domain doesn't have an ext file, create it
if ( ! -f "$DOMAIN.ext" ) {
   # read in the default config file
   open CNF, "<$configFile" or die "Could not read $configFile: $!\n";
   my @config = <CNF>;
   close CNF;
   # remove all line endings
   chomp @config;
   # the first DNS entry is the actual domain.
   push @config, "DNS.1=$DOMAIN";
   my $dns = 2;
   # read in all aliases and add them as a separate DNS entry
   while ( my $alias = shift ) {
      push @config, "DNS.$dns=$alias";
      $dns++;
   }
   # print the ext file back out
   open CNF, ">$DOMAIN.ext" or die "Could not write to $DOMAIN.ext: $!\n";
   print CNF join( "\n", @config ) . "\n";
   close CNF;
}

# Create an rsa key into $DOMAIN.key
`openssl genrsa -out $DOMAIN.key 2048`;
# create a signing request, using $DOMAIN.ext for all the DN stuff saved in $DOMAIN.csr
`openssl req -new -key $DOMAIN.key -out $DOMAIN.csr -config $DOMAIN.ext`;
# generate the actual crt file as $DOMAIN.crt, using the csr and ext file
`openssl x509 -req -in $DOMAIN.csr -CA vanduzen_CA.pem -CAkey vanduzen_CA.key -CAcreateserial -out $DOMAIN.crt -days 365 -sha256 -extfile $DOMAIN.ext`;


1;