#!/bin/sh
set -ex

# Generate PEM-encoded PKCS#8 private key and PEM-encoded SPKI public key

if command -v openssl; then
  # -algorithm RSA -pkeyopt rsa_keygen_bits:2048
  # ES256: -algorithm EC -pkeyopt ec_paramgen_curve:P-256
  gen_pkcs8() { openssl genpkey -algorithm ed25519; }
  pkcs8_to_spki() { openssl pkey -pubout; }
else
  printf 'No tools known\n' >&2 && exit 1
fi

gen_pkcs8 | tee ./privkey.pem | pkcs8_to_spki >./pubkey.pem