#! /bin/bash

set -o errexit

name="$1"

subject="/C=DE/O=\/usr\/local/OU=SSL/CN=${name}"                    ;;

for dir in /etc/apache2/ssl /etc/ssl/private
do
  keyfile="${dir}/${name}.key"
  [ -f "$keyfile" ] && break
done

echo "Found keyfile '$keyfile'"

openssl req -new -key "$keyfile" -outform PEM \
            -subj "${subject}" \
            -config <(cat /etc/ssl/openssl.cnf "${name}.conf") \
            -out "${name}.csr"