Skip to content

Commit

Permalink
make-pretty shell
Browse files Browse the repository at this point in the history
  • Loading branch information
EskoDijk committed May 13, 2024
1 parent 10ba4a3 commit b4cb40a
Show file tree
Hide file tree
Showing 3 changed files with 27 additions and 27 deletions.
16 changes: 8 additions & 8 deletions tools/tcat_ble_client/auth-generate/create-cert-ca.sh
Original file line number Diff line number Diff line change
Expand Up @@ -32,26 +32,26 @@
# work for those TCAT Devices.

if [ $# -ne 1 ]; then
echo "Usage: ./create-cert-ca.sh <NameOfCA>"
exit 1
echo "Usage: ./create-cert-ca.sh <NameOfCA>"
exit 1
fi
set -eu

# days certificate is valid
(( VALIDITY=20*365 ))
((VALIDITY = 20 * 365))

NAME=${1}

# create csr
openssl req -new -key "ca/${NAME}_key.pem" -out "${NAME}.csr" \
-subj "/CN=TCAT Example CA '${NAME}'/O=Example Inc/L=Example City/ST=CA/C=US"
-subj "/CN=TCAT Example CA '${NAME}'/O=Example Inc/L=Example City/ST=CA/C=US"

# self-sign csr
mkdir -p output >& /dev/null
mkdir -p output
openssl x509 -set_serial 0x01 -extfile "ext/${NAME}.ext" \
-extensions "${NAME}" -req -in "${NAME}.csr" \
-signkey "ca/${NAME}_key.pem" -out "ca/${NAME}_cert.pem" \
-days "${VALIDITY}" -sha256
-extensions "${NAME}" -req -in "${NAME}.csr" \
-signkey "ca/${NAME}_key.pem" -out "ca/${NAME}_cert.pem" \
-days "${VALIDITY}" -sha256

# delete temp files
rm -f "${NAME}.csr"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -30,18 +30,18 @@
# Script to generate a TCAT Commissioner X509v3 certificate.

if [ $# -ne 2 ]; then
echo "Usage: ./create-cert-tcat-commissioner.sh <NameOfCommissioner> <NameOfCA>"
exit 1
echo "Usage: ./create-cert-tcat-commissioner.sh <NameOfCommissioner> <NameOfCA>"
exit 1
fi
set -eu

# number of days certificate is valid
(( VALIDITY="14" ))
((VALIDITY = "14"))
echo "create-cert-tcat-commissioner.sh - Using validity param -days ${VALIDITY}"

NAME=${1}
CANAME=${2}
(( ID=${NAME:0-1} ))
((ID = ${NAME:0-1}))
CACERTFILE="ca/${CANAME}_cert.pem"

echo " TCAT commissioner name : ${NAME}"
Expand All @@ -50,14 +50,14 @@ echo " Numeric serial ID : ${ID}"

# create csr for TCAT Commissioner
openssl req -new -key "keys/${NAME}_key.pem" -out "${NAME}.csr" -subj \
"/CN=TCAT Example ${NAME}/serialNumber=3523-1543-000${ID}"
"/CN=TCAT Example ${NAME}/serialNumber=3523-1543-000${ID}"

# sign csr by CA
mkdir -p "output/${NAME}"
openssl x509 -set_serial "92429${ID}" -CAform PEM -CA "${CACERTFILE}" \
-CAkey "ca/${CANAME}_key.pem" -extfile "ext/${NAME}.ext" -extensions \
"${NAME}" -req -in "${NAME}.csr" -out "output/${NAME}/commissioner_cert.pem" \
-days "${VALIDITY}" -sha256
-CAkey "ca/${CANAME}_key.pem" -extfile "ext/${NAME}.ext" -extensions \
"${NAME}" -req -in "${NAME}.csr" -out "output/${NAME}/commissioner_cert.pem" \
-days "${VALIDITY}" -sha256

# delete temp files
rm -f "${NAME}.csr"
Expand Down
22 changes: 11 additions & 11 deletions tools/tcat_ble_client/auth-generate/create-cert-tcat-device.sh
Original file line number Diff line number Diff line change
Expand Up @@ -30,39 +30,39 @@
# Script to generate a TCAT Device X509v3 certificate.

if [ $# -ne 2 ]; then
echo "Usage: ./create-cert-tcat-device.sh <NameOfDevice> <NameOfCA>"
exit 1
echo "Usage: ./create-cert-tcat-device.sh <NameOfDevice> <NameOfCA>"
exit 1
fi
set -eu

# days certificate is valid
SECONDS1=$(date +%s) # time now
SECONDS1=$(date +%s) # time now
SECONDS2=$(date --date="2999-12-31 23:59:59Z" +%s) # target end time
(( VALIDITY="(${SECONDS2}-${SECONDS1})/(24*3600)" ))
((VALIDITY = "(${SECONDS2}-${SECONDS1})/(24*3600)"))
echo "create-cert-tcat-device.sh - Using validity param -days ${VALIDITY}"

NAME="${1}"
CANAME="${2}"
CACERTFILE="ca/${CANAME}_cert.pem"
(( ID=${NAME:0-1} ))
(( SERIAL=13800+ID ))
((ID = ${NAME:0-1}))
((SERIAL = 13800 + ID))

echo " TCAT device name : ${NAME}"
echo " TCAT device CA name: ${CANAME}"
echo " Numeric serial ID : ${ID}"

# create csr for device.
# conform to 802.1AR guidelines, using only CN + serialNumber when
# conform to 802.1AR guidelines, using only CN + serialNumber when
# manufacturer is already present as CA. CN is not even mandatory, but just good practice.
openssl req -new -key "keys/${NAME}_key.pem" -out "${NAME}.csr" -subj \
"/CN=TCAT Example ${NAME}/serialNumber=4723-9833-000${ID}"
"/CN=TCAT Example ${NAME}/serialNumber=4723-9833-000${ID}"

# sign csr by CA
mkdir -p "output/${NAME}"
openssl x509 -set_serial "${SERIAL}" -CAform PEM -CA "${CACERTFILE}" \
-CAkey "ca/${CANAME}_key.pem" -extfile "ext/${NAME}.ext" -extensions \
"${NAME}" -req -in "${NAME}.csr" -out "output/${NAME}/device_cert.pem" \
-days "${VALIDITY}" -sha256
-CAkey "ca/${CANAME}_key.pem" -extfile "ext/${NAME}.ext" -extensions \
"${NAME}" -req -in "${NAME}.csr" -out "output/${NAME}/device_cert.pem" \
-days "${VALIDITY}" -sha256

# delete temp files
rm -f "${NAME}.csr"
Expand Down

0 comments on commit b4cb40a

Please sign in to comment.