#!/bin/bash set -e echo "Generating CA certificate..." openssl req -config ${rootdir}/openssl.cnf -key ${rootdir}/key/ca.key -new -x509 -days 3650 -extensions v3_ca -out ${rootdir}/crt/ca.crt > /dev/null 2>&1 chmod 444 ${rootdir}/crt/ca.crt