#!/bin/bash

if [ -z "$1" ] ; then
        echo "usage: $0 domain [simple] e.g. www.example.nl"
        exit
fi

cd /etc/ssl/private/new

if [ -z $2 ] ; then
        openssl req -new -nodes -sha256 -newkey rsa:2048 -keyout $1.key -out $1.csr
else
        openssl req -new -nodes -sha256 -newkey rsa:2048 -subj /CN=$1 -keyout $1.key -out $1.csr
fi

pico /etc/ssl/private/new/$1.csr

echo "Voer 'ssl-makepem $1' uit als je het nieuwe certificaat hebt."