X-Git-Url: https://robinkrens.nl/gitweb/?p=x509-shell-scripts;a=blobdiff_plain;f=user-certificate.sh;fp=user-certificate.sh;h=57d3fd8b2f204240f1744580f7cd3ae30bfb3cee;hp=ad489b78e39d074d137336cb87daee94532fe19f;hb=e04860b438ee646fedbaa035dbc82e2642855710;hpb=43e9f0ef06471c389dc706d9ecbcb18a40d3c8b1

diff --git a/user-certificate.sh b/user-certificate.sh
index ad489b7..57d3fd8 100755
--- a/user-certificate.sh
+++ b/user-certificate.sh
@@ -1,12 +1,37 @@
+#!/bin/bash
+
+# create user key
+# presumes standard directory of strongswan 
+
+VPN_COUNTRY="AUS"
+VPN_IP_ADDRESS="45.32.241.182"
+VPN_NAME="ROB-VPN-AUS"
+
+echo "Entering strongswan config directory..."
 cd /etc/strongswan/ipsec.d/
+
+echo -n "Enter a username: "
+read USR_NAME
+
+echo -n "Enter an email (identity): "
+read IDENTITY
+
 strongswan pki --gen --type rsa --size 2048 \
 	--outform pem \
-	> private/RobKey.pem
-chmod 600 private/RobKey.pem
-strongswan pki --pub --in private/RobKey.pem --type rsa | \
+	> private/${USR_NAME}Key.pem
+chmod 600 private/${USR_NAME}Key.pem
+strongswan pki --pub --in private/${USR_NAME}Key.pem --type rsa | \
 	strongswan pki --issue --lifetime 730 \
 	--cacert cacerts/strongswanCert.pem \
 	--cakey private/strongswanKey.pem \
-	--dn "C=JP, O=ROB-VPN-JP, CN=rakrens@gmail.com" \
-	--san rakrens@gmail.com \
-	--outform pem > certs/RobCert.pem
+	--dn "C=$VPN_COUNTRY, O=$VPN_NAME, CN=$IDENTITY" \
+	--san $IDENTITY \
+	--outform pem > certs/${USR_NAME}Cert.pem
+
+echo "Exporting to a PKCS12 file..."
+
+openssl pkcs12 -export -inkey private/${USR_NAME}Key.pem \
+	-in certs/${USR_NAME}Cert.pem -name "${USR_NAME}'s Certifcate" \
+	-certfile cacerts/strongswanCert.pem \
+	-caname "$VPN_NAME" \
+	-out $USR_NAME.p12