Wygenerowanie CA

--- /root/sampleconfig.sh       2019-11-08 12:33:13.713139782 +0100
+++ /root/bsd-serwis-ca.sh      2019-11-08 12:43:49.893410982 +0100
@@ -18,7 +18,7 @@ else
    exit 1
 fi

-REALM='democa'
+REALM='bsdserwis'
 FQDN=`hostname -f`
 # For automated testing we want to have this set to root
 # unset this to get random passwords (put into the .pass files)
@@ -50,24 +50,24 @@ PASS_SUFFIX='pass'
 BACKUP_SUFFIX='~'

 # root CA selfsigned (in production use company's root certificate)
-ROOT_CA='OpenXPKI_Root_CA'
+ROOT_CA='BSD_Serwis_Root_CA'
 ROOT_CA_REQUEST="${SSL_REALM}/${ROOT_CA}.${REQUEST_SUFFIX}"
 ROOT_CA_KEY="${SSL_REALM}/${ROOT_CA}.${KEY_SUFFIX}"
 ROOT_CA_KEY_PASSWORD="${SSL_REALM}/${ROOT_CA}.${PASS_SUFFIX}"
 ROOT_CA_CERTIFICATE="${SSL_REALM}/${ROOT_CA}.${CERTIFICATE_SUFFIX}"
-ROOT_CA_SUBJECT='/CN=OpenXPKI Root CA 1'
-ROOT_CA_SERVER_FQDN='rootca.openxpki.net'
+ROOT_CA_SUBJECT='/CN=BSD Serwis Root CA 1'
+ROOT_CA_SERVER_FQDN='ca.bsdserwis.com'

 # issuing CA signed by root CA above
-ISSUING_CA='OpenXPKI_Issuing_CA'
+ISSUING_CA='BSD_Serwis_Issuing_CA'
 ISSUING_CA_REQUEST="${SSL_REALM}/${ISSUING_CA}.${REQUEST_SUFFIX}"
 ISSUING_CA_KEY="${SSL_REALM}/${ISSUING_CA}.${KEY_SUFFIX}"
 ISSUING_CA_KEY_PASSWORD="${SSL_REALM}/${ISSUING_CA}.${PASS_SUFFIX}"
 ISSUING_CA_CERTIFICATE="${SSL_REALM}/${ISSUING_CA}.${CERTIFICATE_SUFFIX}"
-ISSUING_CA_SUBJECT='/C=DE/O=OpenXPKI/OU=PKI/CN=OpenXPKI Demo Issuing CA 1'
+ISSUING_CA_SUBJECT='/C=PL/O=BSD Serwis/OU=Security/CN=BSD Serwis Signing CA 1'

 # SCEP registration authority certificate signed by root CA above
-SCEP='OpenXPKI_SCEP_RA'
+SCEP='BSD_Serwis_SCEP_RA'
 SCEP_REQUEST="${SSL_REALM}/${SCEP}.${REQUEST_SUFFIX}"
 SCEP_KEY="${SSL_REALM}/${SCEP}.${KEY_SUFFIX}"
 SCEP_KEY_PASSWORD="${SSL_REALM}/${SCEP}.${PASS_SUFFIX}"
@@ -75,7 +75,7 @@ SCEP_CERTIFICATE="${SSL_REALM}/${SCEP}.$
 SCEP_SUBJECT="/CN=${FQDN}:scep-ra"

 # Apache WEB certificate signed by root CA above
-WEB='OpenXPKI_WebUI'
+WEB='BSD_Serwis_WebUI'
 WEB_REQUEST="${SSL_REALM}/${WEB}.${REQUEST_SUFFIX}"
 WEB_KEY="${SSL_REALM}/${WEB}.${KEY_SUFFIX}"
 WEB_KEY_PASSWORD="${SSL_REALM}/${WEB}.${PASS_SUFFIX}"
@@ -84,7 +84,7 @@ WEB_SUBJECT="/CN=${FQDN}"
 WEB_SERVER_FQDN="${FQDN}"

 # data vault certificate selfsigned
-DATAVAULT='OpenXPKI_DataVault'
+DATAVAULT='BSD_Serwis_DataVault'
 DATAVAULT_REQUEST="${SSL_REALM}/${DATAVAULT}.${REQUEST_SUFFIX}"
 DATAVAULT_KEY="${SSL_REALM}/${DATAVAULT}.${KEY_SUFFIX}"
 DATAVAULT_KEY_PASSWORD="${SSL_REALM}/${DATAVAULT}.${PASS_SUFFIX}"
@@ -96,11 +96,11 @@ DATAVAULT_SUBJECT='/CN=Internal DataVaul
 #
 BITS=4096
 DAYS=371 # 2 years (default value not used for further enhancements)
-RDAYS="3655" # 10 years for root
-IDAYS="1828" # 5 years for issuing
-SDAYS="365" # 1 years for scep
-WDAYS="1096" # 3 years web
-DDAYS="$RDAYS" # 10 years datavault (same a root)
+RDAYS="7355" # 20 years for root
+IDAYS="3655" # 10 years for issuing
+SDAYS="1835" # 5 years for scep
+WDAYS="1098" # 3 years web
+DDAYS="$RDAYS" # 20 years datavault (same a root)

 # creation neccessary directories and files
 echo -n "creating configuration for openssl ($OPENSSL_CONF) .. "