#!/usr/bin/env bash
set -euo pipefail
prefix="/usr/local/sbin"
sudo install -d -m 700 /etc/ssl/myca/private
sudo install -d -m 755 /etc/ssl/myca/{certs,csrs,exts}
sudo install -m 755 bin/myca.sh        "$prefix/myca.sh"
sudo install -m 755 bin/mknginx-sni.sh "$prefix/mknginx-sni.sh"
sudo install -m 755 bin/init-ca.sh     "$prefix/init-ca.sh"
echo "Installed to $prefix. CA dir at /etc/ssl/myca"