#!/bin/sh

# Sign the server certificate request with the CA using the command 
# (again, "security" is the PEM pass phrase):
openssl ca -config ca.config -policy policy_anything -days 730 -out cert.pem -infiles cert.req
openssl ca -config ca.config -policy policy_anything -days 730 -out certDSA.pem -infiles certDSA.req

# Convert the server certificate from PEM (plain text format) to DER (binary) format:
# openssl x509 -outform DER -in CA.pem -out CA.crt
openssl x509 -outform DER -in cert.pem -out cert.crt
openssl x509 -outform DER -in certDSA.pem -out certDSA.crt

# import the CA and server certificate into wss4j's keystore (note that 
# importing the server certificate results in the keystore's wss4j 
# certificate being updated with the new signature):
# "$JAVA_HOME/bin/keytool" -import -file ca.crt -keystore wss4j.keystore
"$JAVA_HOME/bin/keytool" -import -alias wss4jCert -file cert.crt -keystore wss4j.keystore
"$JAVA_HOME/bin/keytool" -import -alias wss4jCertDSA -file certDSA.crt -keystore wss4j.keystore