More

bootstrap_intermediate.sh

 #!/bin/bash
 
-mkdir intermediate
 cd intermediate
 mkdir -p certs crl csr newcerts private
 chmod 700 private

create_intermediate.sh

 #!/bin/bash
 
 # Generate intermediate key
-#openssl genrsa -aes256 \
-#        -out intermediate/private/intermediate.key.pem 4096
+openssl genrsa -aes256 \
+        -out intermediate/private/intermediate.key.pem 4096
 chmod 400 intermediate/private/intermediate.key.pem
 
 # Generate intermediate cert request
-#openssl req -config intermediate/openssl.cnf -new -sha256 \
-#    -key intermediate/private/intermediate.key.pem \
-#    -out intermediate/csr/intermediate.csr.pem
+openssl req -config intermediate/openssl.cnf -new -sha256 \
+    -key intermediate/private/intermediate.key.pem \
+    -out intermediate/csr/intermediate.csr.pem
 
 # Sign with root ca
 openssl ca -config openssl.cnf -extensions v3_intermediate_ca \

intermediate/openssl.cnf

@@ -7,7 +7,7 @@ default_ca = CA_default
 
 [ CA_default ]
 # Directory and file locations.
-dir               = /root/ca/intermediate
+dir               = intermediate
 certs             = $dir/certs
 crl_dir           = $dir/crl
 new_certs_dir     = $dir/newcerts