#!/bin/sh

set -e
set -u

cd ~/certs

if [ "$#" != 1 ]; then
  echo >&2 "Usage: $0 <fqdn>"
  exit 1
fi

cn="$1"
shift

if [ -e "$cn.key" ] ; then
  echo >&2 "$cn.key already exists."
  exit 1
fi

umask 0077
openssl genrsa -out "$cn.key" 4096