open62541/tools/certs/create_self-signed.py

#!/usr/bin/env python
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this 
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

import sys
import os
import shutil
import socket

if len(sys.argv) < 2:
    sys.exit('Usage: %s directory to output certificates' % sys.argv[0])

if not os.path.exists(sys.argv[1]):
    sys.exit('ERROR: Directory %s was not found!' % sys.argv[1])

keysize = 2048

if len(sys.argv) == 3:
    keysize = int(sys.argv[2])

certsdir = os.path.dirname(os.path.abspath(__file__))
print(certsdir)
os.environ['HOSTNAME'] = socket.gethostname()
openssl_conf = os.path.join(certsdir, "localhost.cnf")

os.chdir(os.path.abspath(sys.argv[1]))
os.system("""openssl genrsa -out ca.key {}""".format(keysize))
os.system("""openssl req \
    -x509 \
    -new \
    -nodes \
    -key ca.key \
    -days 3650 \
    -subj "/C=DE/O=open62541/CN=open62541.org" \
    -out ca.crt""")
os.system("""openssl req \
    -new \
    -newkey rsa:{} \
    -nodes \
    -subj "/C=DE/O=open62541/CN=open62541Server@localhost" \
    -keyout localhost.key \
    -out localhost.csr""".format(keysize))
os.system("""openssl x509 -req \
    -days 3650 \
    -in localhost.csr \
    -CA ca.crt \
    -CAkey ca.key \
    -CAcreateserial \
    -out localhost.crt \
    -extfile {} \
    -extensions v3_ca""".format(openssl_conf))
os.system("openssl x509 -in localhost.crt -outform der -out server_cert.der")
os.system("openssl rsa -inform PEM -in localhost.key -outform DER -out server_key.der")
# Convert certificate authority(CA) file 'ca.crt' into DER encoded form
# to provide as trust list input
os.system("openssl x509 -in ca.crt -outform der -out ca_cert.der")

os.remove("localhost.key")
os.remove("localhost.crt")
os.remove("localhost.csr")
os.remove("ca.srl")
# os.remove("ca.key")
# os.remove("ca.crt")

# if os.path.isfile(os.path.join(sys.argv[1], "server_cert.der")):
# 	os.remove(os.path.join(sys.argv[1], "server_cert.der"))
# shutil.move("server_cert.der", sys.argv[1])
# if os.path.isfile(os.path.join(sys.argv[1], "ca.crt")):
# 	os.remove(os.path.join(sys.argv[1], "ca.crt"))
# shutil.move("ca.crt", sys.argv[1])

print("Certificates generated in " + sys.argv[1])