#!/bin/sh

set -xe

cd /certificates
rm -rf *

cat > myconfig.cnf << EOF
[mysection]
keyUsage         = critical, digitalSignature, nonRepudiation, keyCertSign, cRLSign
basicConstraints = critical, CA:TRUE
EOF

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -sha256 -days 365 -not_before $(date --date="@$(( $(date +%s) - 86400 * 7 ))" +%y%m%d%H%M%SZ) -nodes -subj "/C=XX/O=Sealcode/OU=CompanySectionName/CN=Do not trust, rentgendroid certificate" -config myconfig.cnf -extensions mysection

cat cert.pem key.pem > mitmproxy-ca.pem

mv cert.pem mitmproxy-ca-cert.pem

rm myconfig.cnf