gen_hen_cert.sh

#!/bin/bash

if [ $# -ne 1 ]
then
    echo "Generate Home Edge Node (HEN) Certificate"
    echo "Usage:"
    echo "-------------------------------------------------------------------------------"
    echo "  $0 [IP]             : generate hen certificate for node with IP adrress"
    echo "Example:"
    echo "  $0 192.168.0.100    : generate hen certificate for node with 192.168.0.100"
    echo "-------------------------------------------------------------------------------"
    exit 1
fi

mkdir -p ./certs/$1

# Home Edge Node (HEN) Certificate
# Generate HEN private key: hen-key.pem
openssl genrsa -out ./certs/$1/hen-key.pem 2048

# Generate HEN Certificate request: hen.csr
openssl req -new -nodes -key ./certs/$1/hen-key.pem -out ./certs/$1/hen.csr -subj /C=KR/ST=Seoul/O="Samsung Electronics"/CN="Home Edge Node Certificate"

# Signature HEN Certificate: hen-crt.pem
openssl x509 -req -extfile <(printf "subjectAltName=IP:$1") -days 365 -in ./certs/$1/hen.csr -CA ./certs/ca-crt.pem -CAkey ./certs/ca-key.pem -CAcreateserial -out ./certs/$1/hen-crt.pem -outform PEM