1#!/bin/bash 2set -ex 3cd $(dirname $0) 4openssl req -new -x509 -batch -nodes -days 10000 -keyout rootca.key -out rootca.crt 5openssl req -new -batch -nodes -sha256 -keyout cert.key -out cert.csr -subj '/C=GB/CN=quic.tech' 6openssl x509 -req -days 10000 -in cert.csr -CA rootca.crt -CAkey rootca.key -CAcreateserial -out cert.crt 7openssl verify -CAfile rootca.crt cert.crt 8cp cert.crt cert-big.crt 9cat cert.crt >> cert-big.crt 10cat cert.crt >> cert-big.crt 11cat cert.crt >> cert-big.crt 12cat cert.crt >> cert-big.crt 13rm cert.csr 14rm rootca.key 15rm rootca.srl 16