#!/bin/bash

if [ "$#" != "1" ];
then
    echo -e "Usage:\n\t$0 <hostname>";
    exit 1;
fi

TARGET=$1
SSL=/etc/ssl
PRIV=$SSL/private
CERTS=$SSL/certs
OPENSSL=/usr/bin/openssl
OUTDIR=/etc/ssl/tarballs
OUTFILE=$OUTDIR/$TARGET.tar

$OPENSSL req -nodes -new -keyout $PRIV/$TARGET.key -out $PRIV/$TARGET.csr
$OPENSSL ca -out $PRIV/$TARGET.crt -in $PRIV/$TARGET.csr || exit 1

tar cf $OUTFILE $PRIV/$TARGET.* $CERTS/ca.crt
chmod 660 $OUTFILE