#!/usr/bin/perl
# 19.6.1998, Sampo Kellomaki <[email protected]>
# 31.3.1999, Upgraded to OpenSSL-0.9.2b, --Sampo
# 31.7.1999, Upgraded to OpenSSL-0.9.3a, fixed depending on symlinks
#            (thanks to schinder@@pobox_.com) --Sampo
# 7.4.2001,  Upgraded to OpenSSL-0.9.6a --Sampo
# 9.11.2001, EGD patch from Mik Firestone <mik@@speed.stdio._com> --Sampo
#
# Make a self signed cert

use strict;
use warnings;
use File::Copy;
use File::Spec::Functions qw(catfile);

my $dir      = shift || usage();
my $exe_path = shift || '/usr/local/ssl/bin/openssl';
my $egd      = defined( $ENV{EGD_POOL} ) ? "-rand $ENV{EGD_POOL}" : '';

my $conf = catfile($dir, 'req.conf');
my $key  = catfile($dir, 'key.pem' );
my $cert = catfile($dir, 'cert.pem');

open (REQ, "|$exe_path req -config $conf "
      . "-x509 -days 3650 -new -keyout $key $egd >$cert")
    or die "cant open req. check your path ($!)";
print REQ <<DISTINGUISHED_NAME;
XX
Net::SSLeay
test land
Test City
Net::SSLeay Organization
Test Unit
127.0.0.1
sampo\@iki.fi
DISTINGUISHED_NAME
    ;
close REQ;
system "$exe_path verify $cert";  # Just to check

# Generate an encrypted password too
system "$exe_path rsa -in $key -des -passout pass:secret -out $key.e"; 

### Prepare examples directory as certificate directory

my $hash = `$exe_path x509 -inform pem -hash -noout <$cert`;
chomp $hash;

my $hash_file = catfile($dir, "$hash.0");
unlink $hash_file;
copy($cert, $hash_file) or die "Can't symlink $dir/$hash.0 ($!)";

sub usage {
    die "Usage: $0 DIR [PATH_TO_OPENSSL]";
}