REM Posizionarsi nella home directory
REM Inizializzare la PKI eseguendo i comandi indicati in init-data.txt
REM Generare nuove CA eseguendo tutti i comandi indicati in new-ca.txt
REM Tutte le password sono impostate con il seguente valore: 123456

CD SERVER
openssl genpkey -config ..\conf\server.cnf -aes256 -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -out private\server-01.key -pass pass:123456
openssl req -config ..\conf\server.cnf -new -key private\server-01.key -subj "/C=IT/ST=Novara/L=Novara/O=ABC Soluzioni/CN=server-01.abcsoluzioni.eu" -addext "subjectAltName = DNS:mirror1.abcsoluzioni.eu, DNS:mirror2.abcsoluzioni.eu" -text -out csr\server-01.csr -passin pass:123456
copy csr\server-01.csr ..\INTERMEDIATE-CA\csr

CD ..\INTERMEDIATE-CA
openssl ca -config ..\conf\intermediate-ca.cnf -batch -days 730 -in csr\server-01.csr -passin pass:123456 -out ..\SERVER\certs\server-01.crt

CD ..\SERVER
openssl pkcs12 -export -out pkcs12\server-01.p12 -inkey private\server-01.key -in certs\server-01.crt -certfile ..\INTERMEDIATE-CA\certs\abc-chain-ca.crt -passin pass:123456 -passout pass:123456

CD ..\CLIENT
openssl genpkey -config ..\conf\client.cnf -aes256 -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -out private\client-01.key -pass pass:123456
openssl req -config ..\conf\client.cnf -new -key private\client-01.key -subj "/C=IT/ST=Novara/L=Novara/O=ABC Soluzioni/CN=Mario Rossi/emailAddress=rossi@abcsoluzioni.eu" -addext "subjectAltName = email:mario.rossi@abcsoluzioni.eu, email:m.rossi@abcsoluzioni.eu" -text -out csr\client-01.csr -passin pass:123456
copy csr\client-01.csr ..\INTERMEDIATE-CA\csr 

CD ..\INTERMEDIATE-CA
openssl ca -config ..\conf\intermediate-ca.cnf -batch -policy policy_client_cert -extensions v3_client_cert -days 365 -in csr\client-01.csr -passin pass:123456 -out ..\CLIENT\certs\client-01.crt

CD ..\CLIENT
openssl pkcs12 -export -out pkcs12\client-01.p12 -inkey private\client-01.key -in certs\client-01.crt -certfile ..\INTERMEDIATE-CA\certs\abc-chain-ca.crt -passin pass:123456 -passout pass:123456

CD ..
