#!/bin/bash
# scripts/generate_csr.sh
# 生成Certificate Signing Request (CSR)

echo "=== 生成 CSR 文件 ==="

# 检查openssl
if ! command -v openssl &> /dev/null; then
    echo "❌ openssl未安装"
    exit 1
fi

# 设置输出目录
OUTPUT_DIR=~/Desktop
KEY_FILE="${OUTPUT_DIR}/markbase_developer.key"
CSR_FILE="${OUTPUT_DIR}/markbase_developer.csr"

# 生成私钥和CSR
openssl req -new -newkey rsa:2048 -nodes \
    -keyout "${KEY_FILE}" \
    -out "${CSR_FILE}" \
    -subj "/emailAddress=warren@momentry.ddns.net/CN=MarkBase Development/O=Momentry/C=TW"

# 检查生成结果
if [ -f "${CSR_FILE}" ] && [ -f "${KEY_FILE}" ]; then
    echo ""
    echo "✅ CSR文件已生成："
    echo "   ${CSR_FILE}"
    echo ""
    echo "✅ 私钥文件已生成："
    echo "   ${KEY_FILE}"
    echo ""
    echo "下一步操作："
    echo "1. 打开 Apple Developer Portal → Certificates"
    echo "2. 点击 + 按钮"
    echo "3. 选择 'Mac App Development'"
    echo "4. 上传 ${CSR_FILE}"
    echo "5. Portal会生成 .cer 文件"
    echo "6. 下载到 ~/Downloads/"
    echo ""
    echo "⚠️ 私钥文件请妥善保管（不要上传到Portal）"
else
    echo "❌ CSR生成失败"
    exit 1
fi