certstrap.sh

#!/bin/bash

curl -fLs -o /usr/local/bin/certstrap https://github.com/square/certstrap/releases/download/v1.2.0/certstrap-1.2.0-linux-amd64
chmod +x /usr/local/bin/certstrap

# no passphrases
certstrap init --common-name "CertAuth" --expires "100 years"
certstrap request-cert  --common-name collector
certstrap sign collector --CA CertAuth --expires "100 years"
cp out/cert.crt ./cert.pem
cp out/cert.key ./key.pem

# pkcs12 format
openssl pkcs12 -export -out outputCert.p12 -inkey cert.key -in cert.crt -certfile CA.crt

rm -rf out/