letsencrypt: Add initial scripts

[shutils.git] / letsencrypt / renew-requestcert.sh

diff --git a/letsencrypt/renew-requestcert.sh b/letsencrypt/renew-requestcert.sh
new file mode 100644 (file)
index 0000000..17faea4
--- /dev/null
+++ b/letsencrypt/renew-requestcert.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+openssl req -new -sha256 -key /etc/ssl/letsencrypt/domain.key -subj "/C=US/O=Acme/CN=sthu.org" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:example.com,DNS:www.example.com")) -out /etc/ssl/letsencrypt/domain.csr