#!/bin/sh -x
CA=./ca
openssl req -config ${CA}/openssl.cnf -new \
  -keyout ${CA}/private/newkey.pem -out ${CA}/certs/newreq.pem
