// all shells are stored under shells.
// edit file: myopenssl.cnf to particular path and names.

//*** This is for ca
> setup.sh  //  create necessary files.
> genca.sh  //  create ca keys (stores private key under ca_private_key) 
            //  and certificate (ca_cert.pem).
> printcert.sh ca        // print cert ca_cert.pem

//*** This is for students
> cd <student>_cert_request
> gencertreq.sh <student>    // generate cs472_certreq.pem 
                         // and private key cs472_privatekey.pem
> printcertreq.sh <student>  // print cs472_certreq.pem
> submit cs472           // submit cs472_certreq.pem

//***  This is for ca
> issuecert.sh <student>     // sign <student>_cerreq.pem 
                         // to produce signed_requests/<student>_cert.pem and
                         // issued_certs/01.pem, 01 is serial number of cert.
> printcert.sh  <student>     // print cert <student>_cert.pem
> printcert.sh  issued_certs/01                 // print cert 01.pem

//*** to generate certs: server.pem, client.pem and root.pem for ssl examples.
> mkdir  server_cert_request
> cd server_cert_request
> cp ../shells/genserver_certreq.sh .
> genserver_certreq.sh 
//*** to convert a cert to a certreq
> certoreq.sh cs472
//*** to resign a cert, e.g., renew the cert
> resign.sh cs472