misc updates

[vpn-prov.git] / create-cert.sh

#!/bin/bash

if [ -z "$1" -o -z "$2" ]; then
	echo "Syntax: $0 <OU> <account name>" >&2
	exit 1
fi

cd "$(dirname "$(readlink -f "$0")")"
source ./easy-rsa/vars >&2
KEY_OU="$1" KEY_CN="$2" ./easy-rsa/build-key >&2

cat <<EOF
$(cat base.ovpn)

<tls-auth>
$(cat ta.key)
</tls-auth>

<ca>
$(cat easy-rsa/keys/rootca.crt)
$(cat easy-rsa/keys/ca.crt)
</ca>

<cert>
$(cat easy-rsa/keys/"$2".crt)
</cert>

<key>
$(cat easy-rsa/keys/"$2".key)
</key>

EOF

if [ -f easy-rsa/keys/crl.pem ]; then
	echo -ne "<crl-verify>\n$(cat easy-rsa/keys/crl.pem)\n</crl-verify>\n"
fi