From f7d254d207c197b85a60044b500253b7f84b9181 Mon Sep 17 00:00:00 2001
From: Conor <conorpp@vt.edu>
Date: Thu, 9 Feb 2017 23:13:05 -0500
Subject: [PATCH] script for creating not-self-signed cert

---
 tools/gencert/ca/ca_sign.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100755 tools/gencert/ca/ca_sign.sh

diff --git a/tools/gencert/ca/ca_sign.sh b/tools/gencert/ca/ca_sign.sh
new file mode 100755
index 0000000..bd5f681
--- /dev/null
+++ b/tools/gencert/ca/ca_sign.sh
@@ -0,0 +1,11 @@
+
+[[ "$#" != 4 ]] && echo "usage: $0 <private-key> <CA-cert> <signing-key> <output-cert>" && exit 1
+
+# generate a "signing request"
+openssl req -new -key "$1" -out "$1".csr
+
+# CA sign the request
+openssl x509 -req -in "$1".csr -CA "$2" -CAkey "$3" -out "$4" -set_serial 0
+
+
+openssl  x509 -in "$4" -outform der -out "$4".der