/* Generate a 1024 bit RSA key, and then create a self-signed X.509v3 certificate with that key. If the do_CA variable is set to true, then it will be marked for CA use, otherwise it will get extensions appropriate for use with a client certificate. The private key is stored as an encrypted PKCS #8 object in another file. Written by Jack Lloyd (lloyd@randombit.net), April 7, 2003 This file is in the public domain */ #include #include #include #include using namespace Botan; #include #include #include int main(int argc, char* argv[]) { if(argc != 7) { std::cout << "Usage: " << argv[0] << " passphrase [CA|user] name country_code organization email" << std::endl; return 1; } Botan::LibraryInitializer init; std::string CA_flag = argv[2]; bool do_CA = false; if(CA_flag == "CA") do_CA = true; else if(CA_flag == "user") do_CA = false; else { std::cout << "Bad flag for CA/user switch: " << CA_flag << std::endl; return 1; } try { AutoSeeded_RNG rng; RSA_PrivateKey key(rng, 1024); std::ofstream priv_key("private.pem"); priv_key << PKCS8::PEM_encode(key, rng, argv[1]); X509_Cert_Options opts; opts.common_name = argv[3]; opts.country = argv[4]; opts.organization = argv[5]; opts.email = argv[6]; /* Fill in other values of opts here */ //opts.xmpp = "lloyd@randombit.net"; if(do_CA) opts.CA_key(); X509_Certificate cert = X509::create_self_signed_cert(opts, key, rng); std::ofstream cert_file("cert.pem"); cert_file << cert.PEM_encode(); } catch(std::exception& e) { std::cout << "Exception: " << e.what() << std::endl; return 1; } return 0; }