ca_cert_generator.py

#!/usr/bin/python
"""
Using a self-generated CSR, it will issue a server certificate and generate a private key
This CA certificate can be used to sign other certificates
"""

def ca_cert_generator():
    import os
    import subprocess as sp
    # create a config file for the CA certificate
    ca_cnf = open("ca-cert/ca.cnf", "w+")
    ca_cnf.write(
    """
    [req]
    default_bits = 2048
    prompt = no
    default_md = sha256
    encrypt_key = no
    distinguished_name = dn
    [dn]
    C = US
    O = Organization
    OU = Organization Unit
    CN = Common Name
    """
    )
    ca_cnf.close()
    # 1. generate a root CA certificate and private key
    sp.call(['openssl', 'genrsa', '-out', 'ca-cert/ca.key', '2048'])
    # 2. generate CSR with config file
    sp.call(['openssl', 'req', '-new', '-key', 'ca-cert/ca.key', '-out', 'ca-cert/ca.csr', '-config', 'ca-cert/ca.cnf'])
    # 3. create a self-signed CA certificate
    validDate = input("Enter the expiration (days) for the Root Certificate: ")
    sp.call(['openssl', 'x509', '-req', '-days', validDate, '-in', 'ca-cert/ca.csr', '-signkey', 'ca-cert/ca.key', '-out', 'ca-cert/ca.crt', '-extfile', 'ca-cert/extensions.ext'])
    print("CA certificate and private key generated\n")

if __name__ == '__main__':
    import os
    import subprocess as sp