# shellpki

This script is a wrapper around openssl to manage a small PKI.

## Install

~~~
mkdir /etc/shellpki
useradd shellpki --system -M --home-dir /etc/shellpki --shell /usr/sbin/nologin
install -m 0640 openssl.cnf /etc/shellpki/
install -m 0755 shellpki.sh /usr/local/sbin/shellpki
~~~

## Usage

Initialize PKI creating CA key and certificate :

~~~
shellpki init
~~~

Create a certificate and key on the server :

~~~
shellpki create
~~~

Create a certificate without key from a CSR :

~~~
shellpki fromcsr
~~~

Revoke a certificate :

~~~
shellpki revoke
~~~