create new rsa key via openssl

.gitignore

@@ -4,3 +4,4 @@
 *.pem
 *.pfx
 gpgsm-params
+subject-keygrip.hex

Makefile

@@ -1,5 +1,11 @@
 all : gpgsm-params cert.der cert.pem cert.openssl-text key-cert.p12
 
+subject-keygrip.hex :
+	openssl genrsa 2048 \
+		| openssl pkcs12 -export -nocerts -passout pass: \
+		| gpgsm --import 2>&1 \
+		| grep -Po 'keygrip=\s*\K.*' | sed 's/ //g' >$@
+
 gpgsm-params : gpgsm-params-template subject-keygrip.hex issuer-keygrip.hex expiry-datetime
 	./prepare-gpgsm-params --template gpgsm-params-template \
 		--subject-keygrip "$(shell cat subject-keygrip.hex)" \
@@ -21,6 +27,7 @@ key-cert.p12 : cert.der subject-keygrip.hex
 	gpgsm --out $@ --export-secret-key-p12 '&$(shell cat subject-keygrip.hex)'
 
 clean :
+	-trash subject-keygrip.hex
 	-trash gpgsm-params
 	-trash cert.der
 	-trash cert.pem

subject-keygrip.hex

@@ -1 +0,0 @@
-6C1DEF614EB6B631FAFB6A90B85D0352001BF1C3