#!/bin/bash
#
# YACHT (Yet Another CA How To) Placed in public domain. RLamb 2019
#
wdest="root@mywebserver:/siteroot"
CN="SMIMEOCSP"
export SAN="DNS:null"
openssl ecparam -out ecparam.pem -name prime256v1
openssl req -config req.cnf -new -newkey ec:ecparam.pem -nodes -keyout ocsp.key -out ocsp.csr -subj "/CN=$CN"
openssl ca -config ca2.cnf -cert ca.crt -keyfile ca.key -out ocsp.crt -name ocsp -infiles ocsp.csr
cat ocsp.crt ocsp.key > ocsp.pem
echo scp -p ocsp.pem $wdest/ocsp_smime.pem
cat rootca.crt ca.crt > cafile.pem
echo scp -p cafile.pem $wdest/docs/ca/smime/
echo scp -p index.txt index.txt.attr $wdest/docs/ca/smime/ocsp/
# Test with
# openssl ocsp -issuer ca.crt -cert new.crt -header Host www.example.com -url http://www.example.com/ca/smime/ocsp/ -CAfile cafile.pem
#