generate test certs

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15737 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2005-07-25 20:23:49 +00:00
parent 2fc3e95ec3
commit 4d57bd2a9c

42
lib/hx509/data/gen-req.sh Normal file
View File

@@ -0,0 +1,42 @@
#!/bin/sh
# $Id$
#
gen_cert()
{
openssl req \
-new \
-subj "/CN=$1/C=SE" \
-config openssl.cnf \
-newkey rsa:1024 \
-sha1 \
-nodes \
-keyout out.key \
-out cert.req
if [ "$3" = "ca" ] ; then
ca_arg="-signkey out.key"
else
ca_arg="-CA $2.crt -CAkey $2.key -CAcreateserial"
fi
openssl x509 \
-req \
-days 3650 \
-in cert.req \
-extfile openssl.cnf \
-extensions $4 \
$ca_arg \
-out cert.crt
mv cert.crt $3.crt
mv out.key $3.key
}
gen_cert "hx509 Test Root CA" "root" "ca" "v3_ca"
gen_cert "Test cert" "ca" "test" "usr_cert"
gen_cert "Test cert KeyEncipherment" "ca" "test" "usr_cert_ke"
gen_cert "Test cert DigitalSignature" "ca" "test" "usr_cert_ds"
gen_cert "Sub CA" "ca" "sub-ca" "v3_ca"
gen_cert "Test sub cert" "sub-ca" "sub-cert" "usr_cert"