From 8cbe5dd96d5a94f5ed70d0599bb879d4ea2c632e Mon Sep 17 00:00:00 2001
From: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>
Date: Sun, 17 Nov 2019 16:28:40 +0300
Subject: [PATCH] Init (for import/kernel-5.3)

---
 .gitignore |  6 ++++++
 key.sh     | 25 +++++++++++++++++++++++++
 2 files changed, 31 insertions(+)
 create mode 100644 .gitignore
 create mode 100755 key.sh

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..53d3a89
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,6 @@
+x509*.genkey
+*.pem
+*.tar
+sha*.list
+md*.list
+
diff --git a/key.sh b/key.sh
new file mode 100755
index 0000000..da2c614
--- /dev/null
+++ b/key.sh
@@ -0,0 +1,25 @@
+#!/bin/sh
+# Usage: EMAIL=vasya@pupkin.ru NUM=1 sh key.sh
+set -efu
+
+cat << EOF > "x509_${NUM}.genkey"
+[ req ]
+prompt = no
+default_bits = 4096
+default_md = sha512
+days = 109500
+default_keyfile = full_key${NUM}.pem
+distinguished_name = req_distinguished_name
+[ req_distinguished_name ]
+organizationName = ROSA Linux
+commonName = Additional private kernel modules signing key #${NUM}
+emailAddress = ${EMAIL}
+EOF
+
+openssl req -new -nodes -utf8 -batch -x509 \
+	-config "x509_${NUM}.genkey" \
+	-outform PEM \
+	-out "full_key${NUM}.pem" \
+	-keyout "full_key${NUM}.pem" 
+
+sed -n '/^-----BEGIN CERTIFICATE-----$/,/^-----END CERTIFICATE-----$/p;/^-----END CERTIFICATE-----$/q' "full_key${NUM}.pem" > "public${NUM}.pem"