2018-02-20 09:20:12 +00:00
|
|
|
#!/bin/bash -e
|
|
|
|
|
# shellcheck disable=SC2034
|
|
|
|
|
|
|
|
|
|
# ensure we have `easyrsa` available
|
|
|
|
|
if [ -z "${easyrsa_bin-}" ] || [ ! -x "${easyrsa_bin}" ]; then
|
2018-11-02 23:25:55 +00:00
|
|
|
easyrsa_bin="$(command -v easyrsa 2>/dev/null || true)"
|
2018-02-20 09:20:12 +00:00
|
|
|
if [ -z "${easyrsa_bin}" ]; then
|
|
|
|
|
easyrsa_dir="$(mktemp -dt easyrsa.XXXXXXXX)"
|
|
|
|
|
easyrsa_url="https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.5/EasyRSA-nix-3.0.5.tgz"
|
2018-12-17 18:36:59 +00:00
|
|
|
echo " - Downloading easy-rsa..."
|
2018-02-20 09:20:12 +00:00
|
|
|
(cd "${easyrsa_dir}"; curl -sL "${easyrsa_url}" | tar xz --strip-components=1)
|
|
|
|
|
easyrsa_bin="${easyrsa_dir}/easyrsa"
|
|
|
|
|
# shellcheck disable=SC2064
|
|
|
|
|
trap "rm -rf \"${easyrsa_dir}\"" EXIT
|
|
|
|
|
fi
|
|
|
|
|
export EASYRSA_BATCH=1
|
|
|
|
|
export EASYRSA_KEY_SIZE=4096
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
# setup ROOT_PKI path
|
|
|
|
|
ROOT_PKI="$(realpath "${OUT}/root")"
|
|
|
|
|
|
|
|
|
|
# global expiry settings
|
|
|
|
|
CA_EXPIRY_DAYS=3650
|
|
|
|
|
CRT_EXPIRY_DAYS=730
|
