#!/bin/bash

# 証明書の生成先ディレクトリ
CERT_DIR="ssl/local"

# 自己証明書の情報
COUNTRY="JP"
STATE="Tokyo"
LOCALITY="Tokyo"
ORGANIZATION="Development"
ORGANIZATIONAL_UNIT="Dev Team"
COMMON_NAME="localhost"
EMAIL="admin@example.com"

# 秘密鍵の生成
openssl genrsa -out "${CERT_DIR}/server.key" 2048

# 証明書署名要求（CSR）の生成
openssl req -new -key "${CERT_DIR}/server.key" -out "${CERT_DIR}/server.csr" -subj "/C=${COUNTRY}/ST=${STATE}/L=${LOCALITY}/O=${ORGANIZATION}/OU=${ORGANIZATIONAL_UNIT}/CN=${COMMON_NAME}/emailAddress=${EMAIL}"

# 自己署名証明書の生成
openssl x509 -req -days 365 -in "${CERT_DIR}/server.csr" -signkey "${CERT_DIR}/server.key" -out "${CERT_DIR}/server.crt"

chmod 644 "${CERT_DIR}/server.key" "${CERT_DIR}/server.crt"