Trivial openssl wrapper to initialize and use a local, and preferably offline, certificate authority
./generate-ca.sh <name>
Generate a new certificate authority in ./ca/
./generate-domain.sh <ca> <domain>
Generate a new FQDN domain key, csr, and certificate in ./servers/ signed by (skips common certificate questions about region and organizational units)
./generate-server.sh <ca> <server>
Generate a new server key, csr, and certificate in ./servers/ signed by (- asks all common certificate questions including region and organizational units)
./sign-request.sh <ca> <request> [<domain>]
Sign the indicated with and stores the certificate in ./servers/