mirror of
https://github.com/lwouis/alt-tab-macos.git
synced 2026-05-24 11:20:36 +00:00
lwouis
37 lines
1.1 KiB
Bash
Executable File
37 lines
1.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -exu
|
|
|
|
certificateFile="$1"
|
|
certificatePassword="$2"
|
|
|
|
# certificate request (see https://apple.stackexchange.com/q/359997)
|
|
cat >$certificateFile.conf <<EOL
|
|
[ req ]
|
|
distinguished_name = req_name
|
|
prompt = no
|
|
[ req_name ]
|
|
CN = Local Self-Signed
|
|
[ extensions ]
|
|
basicConstraints=critical,CA:false
|
|
keyUsage=critical,digitalSignature
|
|
extendedKeyUsage=critical,1.3.6.1.5.5.7.3.3
|
|
1.2.840.113635.100.6.1.14=critical,DER:0500
|
|
EOL
|
|
|
|
# generate key
|
|
openssl genrsa -out $certificateFile.key 2048
|
|
# generate self-signed certificate
|
|
openssl req -x509 -new -config $certificateFile.conf -nodes -key $certificateFile.key -extensions extensions -sha256 -out $certificateFile.crt
|
|
|
|
openssl_version=$(openssl version)
|
|
# openssl v3.x requires to pass -legacy
|
|
# see https://www.misterpki.com/openssl-pkcs12-legacy/
|
|
if [[ $openssl_version == OpenSSL\ 3* ]]; then
|
|
flag="-legacy"
|
|
else
|
|
flag=""
|
|
fi
|
|
# wrap key and certificate into PKCS12
|
|
openssl pkcs12 $flag -export -inkey $certificateFile.key -in $certificateFile.crt -out $certificateFile.p12 -passout pass:$certificatePassword
|