@echo offcd %HOME%rem build a request for a cert that will be valid for ten yearsopenssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out %KEY_DIR%\%1.csr -config %KEY_CONFIG%rem sign the cert request with our ca, creating a cert/key pairopenssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr -config %KEY_CONFIG%rem convert the key/cert and embed the ca cert into a pkcs12 file.openssl pkcs12 -export -inkey %KEY_DIR%\%1.key -in %KEY_DIR%\%1.crt -certfile %KEY_DIR%\ca.crt -out %KEY_DIR%\%1.p12rem delete any .old files created in this process, to avoid future file creation errorsdel /q %KEY_DIR%\*.old