Add a functions file for custom actions

functions.zsh

@@ -0,0 +1,29 @@
+#!/usr/bin/env zsh
+
+# Functions
+
+# Generate TLS certs using a local CA
+gencert () {
+    DOMAIN=$1
+
+    test -d /Users/jonny/Development/localCA && ROOT='/Users/jonny/Development/localCA'
+    test -d /home/jonny/git/ca && ROOT='/home/jonny/git/ca'
+    test -d /usr/local/opt/openssl@1.1/bin && PATH='/usr/local/opt/openssl@1.1/bin':$PATH
+    test -f /usr/local/etc/openssl@1.1/openssl.cnf && SSLCNF='/usr/local/etc/openssl@1.1/openssl.cnf'
+    test -f /etc/ssl/openssl.cnf && SSLCNF='/etc/ssl/openssl.cnf'
+
+    cd $ROOT
+    [[ ! -d $DOMAIN ]] && mkdir $DOMAIN
+    cd $DOMAIN
+    [[ -f key ]] && mv key key.bak
+    [[ -f csr ]] && mv csr csr.bak
+    [[ -f crt ]] && mv crt crt.bak
+
+    openssl ecparam -name secp384r1 -genkey -noout -out key
+    chmod 644 key
+    openssl req -new -sha256 -key key -subj "/C=UK/ST=England/L=Darwen/O=JMB Dev Ltd/CN=$DOMAIN" -reqexts SAN -config <(cat $SSLCNF <(printf "[SAN]\nsubjectAltName=DNS:$DOMAIN")) -out csr
+    openssl x509 -req -in csr -extfile <(cat $SSLCNF <(printf "[SAN]\nsubjectAltName=DNS:$DOMAIN")) -extensions SAN -CA ../jmb-ca-ecc.pem -CAkey ../jmb-ca-ecc.key -CAcreateserial -days 90 -sha256 -out crt
+
+    cd $HOME
+    echo 'Certs generated for $DOMAIN'
+}