46 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable File
		
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable File
		
	
	
	
	
#!/bin/sh
 | 
						|
 | 
						|
if [ 1 -ne $# ]
 | 
						|
then
 | 
						|
    echo You must specify output directory : ./make_certs.sh ./freeDiameter
 | 
						|
 | 
						|
    exit;
 | 
						|
fi
 | 
						|
 | 
						|
rm -rf demoCA
 | 
						|
mkdir demoCA
 | 
						|
echo 01 > demoCA/serial
 | 
						|
touch demoCA/index.txt.attr
 | 
						|
touch demoCA/index.txt
 | 
						|
 | 
						|
# Generate .rnd if it does not exist
 | 
						|
openssl rand -out /root/.rnd -hex 256
 | 
						|
 | 
						|
# CA self certificate
 | 
						|
openssl req  -new -batch -x509 -days 3650 -nodes -newkey rsa:1024 -out $1/cacert.pem -keyout cakey.pem -subj /CN=ca.EPC_DOMAIN/C=KO/ST=Seoul/L=Nowon/O=Open5GS/OU=Tests
 | 
						|
 | 
						|
#mme
 | 
						|
openssl genrsa -out $1/mme.key.pem 1024
 | 
						|
openssl req -new -batch -out mme.csr.pem -key $1/mme.key.pem -subj /CN=mme.EPC_DOMAIN/C=KO/ST=Seoul/L=Nowon/O=Open5GS/OU=Tests
 | 
						|
openssl ca -cert $1/cacert.pem -days 3650 -keyfile cakey.pem -in mme.csr.pem -out $1/mme.cert.pem -outdir . -batch
 | 
						|
 | 
						|
#hss
 | 
						|
openssl genrsa -out $1/hss.key.pem 1024
 | 
						|
openssl req -new -batch -out hss.csr.pem -key $1/hss.key.pem -subj /CN=hss.EPC_DOMAIN/C=KO/ST=Seoul/L=Nowon/O=Open5GS/OU=Tests
 | 
						|
openssl ca -cert $1/cacert.pem -days 3650 -keyfile cakey.pem -in hss.csr.pem -out $1/hss.cert.pem -outdir . -batch
 | 
						|
 | 
						|
#smf
 | 
						|
openssl genrsa -out $1/smf.key.pem 1024
 | 
						|
openssl req -new -batch -out smf.csr.pem -key $1/smf.key.pem -subj /CN=smf.EPC_DOMAIN/C=KO/ST=Seoul/L=Nowon/O=Open5GS/OU=Tests
 | 
						|
openssl ca -cert $1/cacert.pem -days 3650 -keyfile cakey.pem -in smf.csr.pem -out $1/smf.cert.pem -outdir . -batch
 | 
						|
 | 
						|
#pcrf
 | 
						|
openssl genrsa -out $1/pcrf.key.pem 1024
 | 
						|
openssl req -new -batch -out pcrf.csr.pem -key $1/pcrf.key.pem -subj /CN=pcrf.EPC_DOMAIN/C=KO/ST=Seoul/L=Nowon/O=Open5GS/OU=Tests
 | 
						|
openssl ca -cert $1/cacert.pem -days 3650 -keyfile cakey.pem -in pcrf.csr.pem -out $1/pcrf.cert.pem -outdir . -batch
 | 
						|
 | 
						|
rm -rf demoCA
 | 
						|
rm -f 01.pem 02.pem 03.pem 04.pem
 | 
						|
rm -f cakey.pem
 | 
						|
rm -f mme.csr.pem hss.csr.pem smf.csr.pem pcrf.csr.pem
 |