{"id":19929093,"url":"https://github.com/thescriptguy/create_rootca_subca","last_synced_at":"2025-10-08T06:42:21.756Z","repository":{"id":134310193,"uuid":"345270035","full_name":"TheScriptGuy/create_rootca_subca","owner":"TheScriptGuy","description":"Some shell scripts to create a Root and Subordinate CA's with various RSA bit sizes and ","archived":false,"fork":false,"pushed_at":"2021-03-22T19:07:33.000Z","size":17,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-01T11:18:56.011Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TheScriptGuy.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-03-07T05:55:08.000Z","updated_at":"2021-03-22T19:07:35.000Z","dependencies_parsed_at":"2023-07-25T15:16:38.057Z","dependency_job_id":null,"html_url":"https://github.com/TheScriptGuy/create_rootca_subca","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/TheScriptGuy/create_rootca_subca","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheScriptGuy%2Fcreate_rootca_subca","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheScriptGuy%2Fcreate_rootca_subca/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheScriptGuy%2Fcreate_rootca_subca/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheScriptGuy%2Fcreate_rootca_subca/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TheScriptGuy","download_url":"https://codeload.github.com/TheScriptGuy/create_rootca_subca/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheScriptGuy%2Fcreate_rootca_subca/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278903017,"owners_count":26065786,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-08T02:00:06.501Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-12T22:41:51.407Z","updated_at":"2025-10-08T06:42:21.740Z","avatar_url":"https://github.com/TheScriptGuy.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# create_rootca_subca\n\nI do a lot of testing with Root and Subordinate CA's and got tired of generating new CA's every time I wanted to test a new ciphersuite or RSA key size.\n\nThese scripts will help create Root and Subordinate CA's (some information can be configured with variables).\n\n* go_ec.sh will generate elliptic curve Root and Subordinate CA's (defaults to secp224r1, secp384r1, secp521r1)\n* go_rsa.sh will generate RSA (defaults to 2048, 4096 and 8192 bit)\n\nFields that can be edited (currently defaults to):\n\n```bash\nORGANIZATIONNAME=\"Acme Widgets Ltd.\"  \nORGANIZATIONALUNITNAME=\"Notorious Big Infosec Group (BIG)\"  \n```\n\nHow many days do you want the CA's to be valid for? Keeping in mind that Subordinate CA days can't be larger than Root CA Days.\n\n10 years + 2 days  \n```bash\nDEFAULT_ROOTCA_DAYS=3652  \n```\n\n2 years + 2 days  \n```bash\nDEFAULT_SUBCA_DAYS=732  \n```\n\nWhich hash do you want to use for signing the certificates.\nKeep in mind that SHA-1 certificates are not trusted by many vendors any more.  \n\n```bash\nDEFAULT_MD=\"sha256\"  \n```\n\nFor the Elliptic Curve keys, edit EC_KEYS appropriately.  \n```bash\nEC_KEYS=\"secp224r1 secp384r1 secp521r1\"  \n```\n\nFor a list of elliptic curves supported by openssl run the following command:\n\n```bash\nopenssl ecparam -list_curves  \n```\n\n\nSpecial thanks to https://pki-tutorial.readthedocs.io for some guidance on how to create the openssl configuration files.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fthescriptguy%2Fcreate_rootca_subca","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fthescriptguy%2Fcreate_rootca_subca","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fthescriptguy%2Fcreate_rootca_subca/lists"}