Add check_csr.sh

[aaronpkahn]

Description

Adds a simple script to validate CSR submissions

Type of change

• Documentation update

Checklist:

Confirm you have completed the following steps:

• I have made corresponding updates to the documentation.

[agbpatro]

NICE

[jbanyer]

@aaronpkahn cool script, but it's giving me an error. I'm on a Macbook.

% openssl req -out tesla.chqtest.net.csr -key ~/garnet/keys/tesla-api/tesla.chqtest.net/com.tesla.3p.key.pem -subj /CN=tesla.chqtest.net/ -new

% cat tesla.chqtest.net.csr 
-----BEGIN CERTIFICATE REQUEST-----
MIHWMH4CAQAwHDEaMBgGA1UEAwwRdGVzbGEuY2hxdGVzdC5uZXQwWTATBgcqhkjO
PQIBBggqhkjOPQMBBwNCAAR4UUCCeq2kTehcBLSlmwl3DfEimd4PQhKLA5PUqekz
F6FradBOWa5StLZgCqbEngf6p+YTFSVPIqPK6rU1kggQoAAwCgYIKoZIzj0EAwID
SAAwRQIhAOpVBBg1zyaD6mCyU9dq1tt5XNw+x9lBfcXfmBXN0Q7wAiBh6P5OyUvN
fHCPvdIGZD4CzC6Thgme/Jjhn0lVuw8NZg==
-----END CERTIFICATE REQUEST-----

% ./tools/check_csr.sh tesla.chqtest.net.csr                                                                                                  
----
CSR: tesla.chqtest.net.csr
Host: subject=CN = tesla.chqtest.net
curl: (3) URL rejected: Malformed input to a URL function
Could not retrieve https://subject=CN = tesla.chqtest.net/.well-known/appspecific/com.tesla.3p.public-key.pem

Is there a bug in the script or have I done something wrong? My CSR creation command comes from the instructions at https://developer.tesla.com/docs/fleet-api#fleet-telemetry

[Bre77]

The check script also didnt work for me, and I generated my CSR using the provided openssl instruction. the SED command does not account for whitespace.

openssl req -in teslemetry.com/teslemetry.com.csr -subject -noout | sed 's/subject=[\/]*CN=//'
subject=CN = teslemetry.com

It should be
s/subject=[\/]*CN\s*=\s*//

Raised #105