Automate CSR (Certificate Signing Request) via Java Keytool with Batch and VBscript

Hi Experts!

I have a script we use to generate a CSR which is currently used manually. I'd like to be able to run this script remotely via sys management tools and use sort of an 'answer' file for info required to generate the CSR.

I guess I have a few questions.. one, can I simply use batch for all of this and what is the syntax for reading a "file.txt" and plugging in the answers.. two, is it possible to use VBscript to plug the answers in via file.txt and can you provide a sample of this either way?

Or is there a completely different approach I should be taking?

The file.txt would exist in the same directory and it's content would simply read something like this:

website.com
IT dept.
Miami
FL
US
yes



Here's what I have so far....

Title Generate CSR
@ECHO Off
Set X64_SYS="C:\Program Files (x86)"
Set SSL_DIR="C:\SSL"
Set SSL_BK_DIR=C:\SSL\BKup
Set KEY_STORE=New.keystore

REM Fetch the path of the Java installation and set as variable

IF EXIST %X64_SYS% (
	for /f "tokens=2*" %%a in ('reg.exe query "HKLM\SOFTWARE\Wow6432Node\Java" /v "Path" ^| find /i "Path"') do set JAVA_HOME=%%b
) ELSE (
	for /f "tokens=2*" %%a in ('reg.exe query "HKLM\SOFTWARE\Java" /v "Path" ^| find /i "Path"') do set JAVA_HOME=%%b
)

Set KTOOL="%JAVA_HOME%\bin\keytool.exe"

REM Create dated working directory

echo > dateFile.txt
set DATEFILE=dateFile.txt
date /t >> %DATEFILE%
for /f "usebackq tokens=2-4 delims=^/ " %%p in (%DATEFILE%) do set THEDAY=%%r%%p%%q
del %DATEFILE%
mkdir %SSL_DIR%
mkdir %SSL_BK_DIR%
cd %SSL_DIR%
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :          
ECHO :     Please use caution while
ECHO :
ECHO :     entering SSL certificate details:
ECHO :
ECHO :  EXAMPLE:
ECHO :
ECHO :  First and Last Name:	        Website.com
ECHO :
ECHO :  Organization Unit:		IT Department
ECHO :
ECHO :  City or Locality:			City
ECHO :
ECHO :  State or Province:		State
ECHO :
ECHO :  Country Code:			US
ECHO :
ECHO :  Is this information Correct?:  yes
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :
ECHO :
%KTOOL% -genkey -keyalg RSA -keysize 2048 -keystore %SSL_DIR%\%KEY_STORE% -alias tomcat
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :          
ECHO :      !!!  Verify All Certs Exist  !!!
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :
ECHO :
pause
%KTOOL% -list -keystore %SSL_DIR%\%KEY_STORE%
ECHO :
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :          
ECHO :      !!!  Verify All Certs Exist  !!!
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :
ECHO :
pause
ECHO :
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :          
ECHO :    Provide Password to export CSR
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :
ECHO :
%KTOOL% -certreq -keyalg RSA -file %SSL_DIR%\New-CSR-%THEDAY%.csr -keystore %SSL_DIR%\%KEY_STORE% -alias tomcat
copy %SSL_DIR%\%KEY_STORE% %SSL_BK_DIR%\CSR-EXPORTED-%THEDAY%.Keystore
copy %SSL_DIR%\New-CSR-%THEDAY%.csr %SSL_BK_DIR%\New-CSR-%THEDAY%.csr
ECHO :
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :
ECHO :      Successfully Exported CSR to %SSL_DIR%
ECHO :
ECHO :::::::::::::::::::::::::::::::::::::::::::
ECHO :
ECHO :
ECHO :
pause

Select all Open in new window