path: root/create-keys.sh

#!/bin/sh -

. ./environment.sh

# Not really sure which silly name to use for the EC curve, doc is not great.  prime256v1?  ansiX9p256r1?  secp256r1?
# If I had to guess, ansiX9p256r1, so try that:   --key-type EC:ansiX9p256r1
# Still having trouble with OpenSSL using this key, so revert to RSA for now, try ECDSA again later.

pkcs11-tool --module ${PKCS11_MODULE} --login --pin ${PKCS11_PIN} --keypairgen --id 1 --label leader  --key-type rsa:2048
pkcs11-tool --module ${PKCS11_MODULE} --login --pin ${PKCS11_PIN} --keypairgen --id 2 --label boris   --key-type rsa:2048
pkcs11-tool --module ${PKCS11_MODULE} --login --pin ${PKCS11_PIN} --keypairgen --id 3 --label natasha --key-type rsa:2848