all : key.enc.pem cert-request.pem cert-request.openssl-text

key.enc.pem : numbits
	openssl genrsa -out $@ -aes256 $(shell cat numbits)

cert-request.pem : key.enc.pem openssl.conf
	openssl req -batch -new -key key.enc.pem \
		-config openssl.conf -sha256 -out $@

cert-request.openssl-text : cert-request.pem
	openssl req -in $^ -noout -text >$@

clean :
	-shred key.enc.pem && rm key.enc.pem
	-trash cert-request.pem
	-trash cert-request.openssl-text