Allow setting serialNumber (needed for reissuing certificates)

Change --key argument to --out-key.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19726 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-01-05 18:36:08 +00:00
parent 22133f82f9
commit 8c9a5ca83a

View File

@@ -1366,7 +1366,7 @@ hxtool_ca(struct certificate_sign_options *opt, int argc, char **argv)
if (opt->generate_key_string) {
hx509_private_key key;
get_key(opt->key_string,
get_key(opt->out_key_string,
opt->generate_key_string,
opt->key_bits_integer,
&key);
@@ -1403,6 +1403,15 @@ hxtool_ca(struct certificate_sign_options *opt, int argc, char **argv)
if (ret)
hx509_err(context, ret, 1, "hx509_ca_tbs_init");
if (opt->serial_number_string) {
heim_integer serialNumber;
der_parse_hex_heim_integer(opt->serial_number_string,
&serialNumber);
ret = hx509_ca_tbs_set_serialnumber(context, tbs, &serialNumber);
der_free_heim_integer(&serialNumber);
}
ret = hx509_ca_tbs_set_spki(context, tbs, &spki);
if (ret)
hx509_err(context, ret, 1, "hx509_ca_tbs_set_spki");