robinkrens.nl - git repository - x509-shell-scripts/blob - server-certificate.sh

   1 cd /etc/strongswan/ipsec.d/
   2 strongswan pki --gen --type rsa --size 2048 \
   3         --outform pem \
   4         > private/vpnHostKey.pem
   5 chmod 600 private/vpnHostKey.pem
   6 strongswan pki --pub --in private/vpnHostKey.pem --type rsa | \
   7         strongswan pki --issue --lifetime 730 \
   8         --cacert cacerts/strongswanCert.pem \
   9         --cakey private/strongswanKey.pem \
  10         --dn "C=JP, O=ROB-VPN-JP, CN=207.148.98.140" \
  11         --san 207.148.98.140 \
  12         --flag serverAuth --flag ikeIntermediate \
  13         --outform pem > certs/vpnHostCert.pem