Self-Signed Certificate Generation Script

This Bash script generates self-signed CA certificates and server certificates, and packages them into PFX format.

Features

Supports using existing CA certificates and private keys, or generating new CA certificates
Can generate server certificates for multiple domain names
Generated certificates include the SAN (Subject Alternative Name) extension, supporting multiple domain names
Packages server certificates, private keys, and CA certificates into PFX format for easy deployment

Download the script file gen_pfx.sh.
Open a terminal and navigate to the directory where the script is located.
Run the script, providing the necessary options and arguments based on your requirements:
```
./gen_pfx.sh [-k <ca_key> -c <ca_cert>] [-n <ca_name>] [domain1 domain2 ...]
```
Option descriptions:
- -k <ca_key>: Specify the path to an existing CA private key file.
- -c <ca_cert>: Specify the path to an existing CA certificate file.
- -n <ca_name>: When generating a new CA certificate, specify the name of the CA.
- domain1 domain2 ...: List of domain names for which to generate server certificates, separated by spaces.
Examples:
- Use an existing CA certificate and private key to generate server certificates for the domain names example.com and www.example.com:
```
./gen_pfx.sh -k ca.key -c ca.crt example.com www.example.com
```
- Generate a new CA certificate and server certificate for the domain name example.com:
```
./gen_pfx.sh -n "My Custom CA" example.com
```
After the script finishes execution, the following files will be generated in the current directory:

ca_key.pem: CA private key file.
ca_cert.pem: CA certificate file.
_key.pem: Server private key file, where is the corresponding domain name.
_cert.pem: Server certificate file, where is the corresponding domain name.
.pfx: PFX file containing the server certificate, private key, and CA certificate, where is the corresponding domain n

The generated certificates are for testing and development purposes only. It is not recommended to use self-signed certificates in a production environment.
Ensure that the script file has executable permissions. If not, you can add executable permissions using the following command:

chmod +x gen_pfx.sh

The script depends on the OpenSSL tool. Make sure OpenSSL is installed on your system.

This script is released under the MIT License.