Skip to content

Commit

Permalink
Merge pull request #13 from acavella/develop
Browse files Browse the repository at this point in the history
Merge develop to main, bump version to 1.0.0
  • Loading branch information
acavella authored Dec 31, 2022
2 parents 4f4cad6 + a3fecb5 commit 0384c5a
Show file tree
Hide file tree
Showing 6 changed files with 145 additions and 303 deletions.
6 changes: 4 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ $ openssl pkcs12 -in <p12 file> -out <install directory>/cert/client.pem -nodes
```shell
$ openssl x509 –inform der –in <root cert> -out <install directory>/cert/ca-trust.pem
```
5. Edit `<install directory>/conf/local.conf` and set parameters to match your local environment:
5. Edit `<install-directory>/conf/local.conf` and set parameters to match your local environment:
```shell
local.conf

Expand All @@ -54,7 +54,9 @@ rsaprofile="x11rsa"
```

## Usage
This script is meant to be operated directly from CLI; all options are specified inline. The first argument is an input file which consists of a lists of Common Names (CN) to be used in the generation of PKCS#10 Certificate Signing Requests (CSR). The second argument is certificate specification (ECDSA, ECDH, RSA), which are based on specifications in CNSSP 15 (Use of Public Standards for Secure Information Sharing). The third argument specifies whether the script interacts with the RAMI API and submits the certificate signing request to the CA. If not specified, the script creates a private key and certificate signing request in an offline only mode; allowing the operator to manually submit / sign the generated CSRs. All files generated will be saved within `<install directory>/output/<named dir>`.
This script is meant to be operated directly from CLI; all options are specified as inline arguments. The first argument is an input file which consists of a lists of Common Names (CN) to be used in the generation of PKCS#10 Certificate Signing Requests (CSR). The input file can be any plain-text file which lists a single CN per line, an example can be found in the input directory.

The second argument is certificate specification (ECDSA, ECDH, RSA), which are based on specifications in CNSSP 15 (Use of Public Standards for Secure Information Sharing). The third argument specifies whether the script interacts with the RAMI API and submits the certificate signing request to the CA. If not specified, the script creates a private key and certificate signing request in an offline only mode; allowing the operator to manually submit / sign the generated CSRs. All files generated will be saved within `<install-directory>/output/<named dir>`.

```shell
$ ./tcra.sh <input-file> [ecdsa|ecdh|rsa] [sign]
Expand Down
2 changes: 1 addition & 1 deletion VERSION
Original file line number Diff line number Diff line change
@@ -1 +1 @@
0.9.1
1.0.0
5 changes: 5 additions & 0 deletions input/input-example.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
YXAVJJ4OPQ
KFBCEVQYWW
X8NPWPYVYD
PUHC1KMMI4
VGZLGLQXVP
100 changes: 0 additions & 100 deletions input/test-100.txt

This file was deleted.

1 change: 0 additions & 1 deletion input/test.txt

This file was deleted.

Loading

0 comments on commit 0384c5a

Please sign in to comment.