REM Posizionarsi nella home directory
REM Inizializzare la PKI eseguendo i comandi indicati in init-data.txt
REM Tutte le password sono impostate con il seguente valore: 123456

CD ROOT-CA
openssl genpkey -config ..\conf\root-ca.cnf -aes256 -algorithm EC -pkeyopt ec_paramgen_curve:P-384 -out private\abc-root-ca.key -pass pass:123456
openssl req -config ..\conf\root-ca.cnf -new -key private\abc-root-ca.key -text -out csr\abc-root-ca.csr -passin pass:123456
openssl ca -config ..\conf\root-ca.cnf -batch -extensions v3_root_cert -selfsign -days 7300 -in csr\abc-root-ca.csr -passin pass:123456 -out certs\abc-root-ca.crt
openssl ca -config ..\conf\root-ca.cnf -batch -gencrl -out crl\abc-root-ca.crl -passin pass:123456
openssl crl  -in crl\abc-root-ca.crl -out crl\abc-root-ca-crl.der -outform DER
openssl crl  -in crl\abc-root-ca-crl.der -inform DER -out crl\abc-root-ca.crl -text

CD ..\INTERMEDIATE-CA
openssl genpkey -config ..\conf\intermediate-ca.cnf -aes256 -algorithm EC -pkeyopt ec_paramgen_curve:P-384 -out private\abc-intermediate-ca.key -pass pass:123456
openssl req -config ..\conf\intermediate-ca.cnf -new -key private\abc-intermediate-ca.key -text -out csr\abc-intermediate-ca.csr -passin pass:123456
copy csr\abc-intermediate-ca.csr ..\ROOT-CA\csr

CD ..\ROOT-CA
openssl ca -config ..\conf\root-ca.cnf -batch -extensions v3_intermediate_cert -days 3650 -in csr\abc-intermediate-ca.csr -passin pass:123456 -out ..\INTERMEDIATE-CA\certs\abc-intermediate-ca.crt

CD ..\INTERMEDIATE-CA
copy certs\abc-intermediate-ca.crt+..\ROOT-CA\certs\abc-root-ca.crt certs\abc-chain-ca.crt
openssl ca -config ..\conf\intermediate-ca.cnf -batch -gencrl -out crl\abc-intermediate-ca.crl -passin pass:123456
openssl crl -in crl\abc-intermediate-ca.crl -out crl\abc-intermediate-ca-crl.der -outform DER
openssl crl -in crl\abc-intermediate-ca-crl.der -inform DER -out crl\abc-intermediate-ca.crl -text

CD ..

