From 41d7470f49a9afbc8c24e3fcf6c8437dddca6edd Mon Sep 17 00:00:00 2001 From: Stefan Winter Date: Thu, 29 Oct 2026 10:30:24 +0100 Subject: [PATCH] Enhance genkey.sh to support multiple key types Added support for generating RSA, ECDSA, SLH-DSA, and ML-DSA keys and certificates. --- scripts/genkey.sh | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/scripts/genkey.sh b/scripts/genkey.sh index 78d00066..c79af950 100755 --- a/scripts/genkey.sh +++ b/scripts/genkey.sh @@ -1,4 +1,17 @@ #!/bin/sh -openssl genrsa 2048 > sign.key -openssl req -x509 -sha256 -new -subj "/CN=Signer" -key sign.key -out sign.crt +# RSA - 4096 bit +openssl genrsa 4096 > sign-rsa.key +openssl req -x509 -sha256 -new -subj "/CN=Signer (RSA)" -key sign-rsa.key -out sign-rsa.crt -days 10000 + +# ECDSA - NIST curve p384 +openssl ecparam -out sign-ecdsa.key -name secp384r1 -genkey +openssl req -x509 -new -key sign-ecdsa.key -out sign-ecdsa.crt -subj "/CN=Signer (ECDSA)" -days 10000 + +# SLH-DSA - 256 bit - short +openssl genpkey -algorithm SLH-DSA-SHA2-256s -out sign-slhdsa.key +openssl req -x509 -new -key sign-slhdsa.key -out sign-slhdsa.crt -subj "/CN=Signer (SLH-DSA)" -days 10000 + +# ML-DSA - 87 +openssl genpkey -algorithm ML-DSA-87 -out sign-mldsa.key +openssl req -x509 -new -key sign-mldsa.key -out sign-mldsa.crt -subj "/CN=Signer (ML-DSA)" -days 10000