#! /bin/zsh
#
# this file:
#   https://dataswamp.org/~incal/conf/.zsh/ssl

# https://www.oftc.net/NickServ/CertFP/
rsa-private-key () {
    local name=nick

    # key / cert
    local key=${name}.key
    local cert=${name}.cer
    openssl req               \
            -nodes            \
            -newkey rsa:2048  \
            -keyout $key      \
            -x509             \
            -days 3650        \
            -out              $cert
    chmod 400 $key

    # pem
    local pem=${name}.pem
    cat $cert $key > $pem
    chmod 400 $pem
    mv $pem ~/.ssl
}

ssl-fingerprint () {
    local cert=$1
    openssl x509 -noout -fingerprint -text < $cert
}

obtain-fingerprint () {
    local server=irc.cyberia.is
    local port=6697
    local connect=${server}:${port}
    openssl s_client -connect $connect < /dev/null |
        openssl x509 -noout -sha256 -fingerprint
}