Generate a OpenSSL Private Key and CSR with SHA256 Signature for 2048 SSL Certs

gencsr

#!/bin/bash   

if [ -n "$1" ]
then
  FILENAME=$1
else  
  echo "Please specify a filename. e.g. ./gencsr www.example.com" >&2
  exit 1
fi  

# Generate key
echo "Generating private key..."
openssl genrsa -out $FILENAME.key 2048

# Create CSR
echo "Creating CSR..." 
openssl req -out $FILENAME.csr -key $FILENAME.key -new -sha256

# check that the signature is correct, should display: Signature Algorithm: sha256WithRSAEncryption
echo "Verifying signature algorithm..."
openssl req -in $FILENAME.csr -noout -text | grep sha256WithRSAEncryption

if [ $? -eq 0 ]
then
  echo "Successfully created private key and CSR"
  exit 0
else
  echo "Could not verify signature algorithm." >&2
  rm $FILENAME.key
  rm $FILENAME.csr
fi

exit 1