#!/bin/sh

#############################################################################################
# 用途： Nginx 签发证书脚本
# 作者： 丁辉
# 更新时间： 2024-05-20
#############################################################################################

read -p "输入您的域名: " DOMAIN

echo "创建服务器密钥..."

openssl genrsa -des3 -out $DOMAIN.key 1024

echo "创建服务器证书签名请求..."

SUBJECT="/C=US/ST=Mars/L=iTranswarp/O=iTranswarp/OU=iTranswarp/CN=$DOMAIN"

openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr

echo "移除密码..."

mv $DOMAIN.key $DOMAIN.origin.key
openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key

echo "签署SSL证书..."

openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt

echo "待办事项: "
echo "将 $DOMAIN.crt 复制到 /etc/nginx/ssl/$DOMAIN.crt"
echo "将 $DOMAIN.key 复制到 /etc/nginx/ssl/$DOMAIN.key"
echo "在nginx中添加配置:"
echo "server {"
echo "    ..."
echo "    listen 443 ssl;"
echo "    ssl_certificate     /etc/nginx/ssl/$DOMAIN.crt;"
echo "    ssl_certificate_key /etc/nginx/ssl/$DOMAIN.key;"
echo "}"