| #!/bin/sh
DEST=/usr/local/share/sai
if [ ! -z "$1" ] ; then
DEST=$1
fi
sudo openssl ecparam -name secp256r1 -genkey -out $DEST/sai-selfsigned-key.pem.1
echo -e "\n\n\n\n\n\n" | \
sudo openssl req -new -x509 \
-sha256 \
-subj "/CN=localhost" \
-days 10000 \
-key $DEST/sai-selfsigned-key.pem.1 \
-out $DEST/sai-selfsigned-cert.pem
#
# mbedtls can't handle the extra EC parameters stanza
#
sudo sed '/^-----BEGIN\ EC\ PARAMETERS-----/,/^-----END\ EC\ PARAMETERS-----/{/^#/!{/^\$/!d}}' $DEST/sai-selfsigned-key.pem.1 > sai-selfsigned-key.pem
sudo cp sai-selfsigned-key.pem $DEST
sudo rm sai-selfsigned-key.pem
echo
|