cert_gen.sh

#!/bin/bash
USERNAME="test"

CA_CRT="./ca/server.crt"
CA_KEY="./ca/server.key"

TIME=$(date +%H_%M)

OUT="${TIME}_${USERNAME}/"
mkdir $OUT

SERIAL=$((1 + RANDOM % 50))

KEY="${OUT}${USERNAME}_key.pem"
CSR="${OUT}${USERNAME}_csr.pem"
CRT="${OUT}${USERNAME}_cert.pem"
SUB="/CN=${USERNAME}"
P12="${OUT}${USERNAME}.p12"

openssl req -newkey rsa:2048 -keyout $KEY -out $CSR -nodes -days 365 -subj $SUB
openssl x509 -req -in $CSR -CA $CA_CRT -CAkey $CA_KEY -out $CRT -set_serial $SERIAL -days 365
openssl pkcs12 -export -clcerts -in $CRT -inkey $KEY -passout pass: -out $P12

mv -f $P12 .
rm -rf $OUT