14c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker#!/bin/bash 24c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# 34c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# Copyright (C) 2009 The Android Open Source Project 44c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# 54c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# Licensed under the Apache License, Version 2.0 (the "License"); 64c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# you may not use this file except in compliance with the License. 74c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# You may obtain a copy of the License at 84c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# 94c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# http://www.apache.org/licenses/LICENSE-2.0 104c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# 114c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# Unless required by applicable law or agreed to in writing, software 124c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# distributed under the License is distributed on an "AS IS" BASIS, 134c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 144c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# See the License for the specific language governing permissions and 154c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# limitations under the License. 164c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 174c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# Generates a public/private key pair suitable for use in signing 184c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# android .apks and OTA update packages. 194c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 204c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerif [ "$#" -ne 2 ]; then 214c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker cat <<EOF 224c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug ZongkerUsage: $0 <name> <subject> 234c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 244c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug ZongkerCreates <name>.pk8 key and <name>.x509.pem cert. Cert contains the 254c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkergiven <subject>. 264c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug ZongkerEOF 274c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker exit 2 284c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerfi 294c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 304c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerif [[ -e $1.pk8 || -e $1.x509.pem ]]; then 314c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker echo "$1.pk8 and/or $1.x509.pem already exist; please delete them first" 324c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker echo "if you want to replace them." 334c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker exit 1 344c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerfi 354c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 364c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# Use named pipes to connect get the raw RSA private key to the cert- 374c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# and .pk8-creating programs, to avoid having the private key ever 384c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker# touch the disk. 394c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 404c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkertmpdir=$(mktemp -d) 414c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkertrap 'rm -rf ${tmpdir}; echo; exit 1' EXIT INT QUIT 424c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 434c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerone=${tmpdir}/one 444c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkertwo=${tmpdir}/two 454c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkermknod ${one} p 464c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkermknod ${two} p 474c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerchmod 0600 ${one} ${two} 484c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 494c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerread -p "Enter password for '$1' (blank for none; password will be visible): " \ 504c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker password 514c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 526b03c84e6ec660884d3cc216302b5f462bb1ce65Baligh Uddin( openssl genrsa -f4 2048 | tee ${one} > ${two} ) & 534c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 544c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkeropenssl req -new -x509 -sha1 -key ${two} -out $1.x509.pem \ 554c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker -days 10000 -subj "$2" & 564c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 574c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerif [ "${password}" == "" ]; then 584c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker echo "creating ${1}.pk8 with no password" 594c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker openssl pkcs8 -in ${one} -topk8 -outform DER -out $1.pk8 -nocrypt 604c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerelse 614c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker echo "creating ${1}.pk8 with password [${password}]" 624c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker echo $password | openssl pkcs8 -in ${one} -topk8 -outform DER -out $1.pk8 \ 634c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker -passout stdin 644c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerfi 654c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongker 664c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerwait 674c95917590d1a992b7fe8f6e703353fdf5a0bf3cDoug Zongkerwait 68