사설 SSL 인증서 만드는 순서 스크립트 기록용

ROOTCA="rootca"

SVNAME="otpkey-api"

openssl genrsa -aes256 -out ${SVNAME}.key 2048

openssl rsa -in ${SVNAME}.key -out ${SVNAME}.npw.key

openssl req -new -key ${SVNAME}.npw.key -out ${SVNAME}.csr

openssl x509 -req -days 3650 -extensions v3_user -in ${SVNAME}.csr -CA ${ROOTCA}.crt -CAcreateserial -CAkey ${ROOTCA}.key -out ${SVNAME}.crt

openssl x509 -in ${SVNAME}.crt -out ${SVNAME}.pem -outform PEM

openssl pkcs12 -export -name ${SVNAME} -in ${SVNAME}.pem -inkey ${SVNAME}.key -out ${SVNAME}.pfx

keytool -importkeystore -srckeystore ${SVNAME}.pfx -srcstoretype pkcs12 -destkeystore ${SVNAME}.jks -deststoretype jks