Project Name
Koji Certification Creation
Names
Sadiki Latty
The Koji Certification
So after reading and tweaking sample openssl code and config here:
http://fedoraproject.org/wiki/Koji/ServerHowTo
I managed to break the code down into 2 separate peices. One for making the CA and one for making the certs for the different users. Now the way my script differs from the original is that it uses the variables passed to it as the default commonName in the ssl.cnf file.
For example, when executing my script to create a cert for a new user...lets say "kojiuser1":
- ./certscript kojiuser1
The script as usual asks the various questions about where you are from and the OU name and the province etc, etc, but is then followed by the question of what the commonName should be. This name and/or the OU name should always be different from any other certs already created or you will get a TXT_ error. My script makes pressing enter easier by allowing you to press enter knowing that the commonName will be (by default).. "kojiuser1". Now this may not seem like anything huge for the creation of one user but what if we were creating multiple users (which was the case with me).