#!/bin/bash

echo "creating certificate authority..."

# generate CA private key
openssl genrsa -out ca.key 4096

# generate CA certificate
echo "Creating CA key..."
openssl req -new -x509 -days 365 -key ca.key -out ca.crt \
    -subj "/C=US/ST=TestState/L=TestCity/O=frontdoor-mtls-test/OU=test-ca/CN=frontdoor-mtls-test-ca"

echo "Creating client key..."
openssl genrsa -out pinned-client.key 4096
echo "Creating CSR..."
openssl req -new -key pinned-client.key -out pinned-client.csr \
    -subj "/C=US/ST=TestState/L=TestCity/O=frontdoor-mtls-test/OU=pinned/CN=pinned-client"

echo "Creating client cert..."
openssl x509 -req -days 365 -in pinned-client.csr -CA ca.crt -CAkey ca.key \
    -CAcreateserial -out pinned-client.crt

ls -al pinned*

echo "===================================="
echo "Use this pinned-client.crt content and add it in the Console"
echo ""
cat pinned-client.crt