From 8c9a5ca83a2c3050c3b304c6a272fe232a9054a6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Fri, 5 Jan 2007 18:36:08 +0000 Subject: [PATCH] Allow setting serialNumber (needed for reissuing certificates) Change --key argument to --out-key. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19726 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/hx509/hxtool.c | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/lib/hx509/hxtool.c b/lib/hx509/hxtool.c index ffad8830b..598528ef9 100644 --- a/lib/hx509/hxtool.c +++ b/lib/hx509/hxtool.c @@ -1366,7 +1366,7 @@ hxtool_ca(struct certificate_sign_options *opt, int argc, char **argv) if (opt->generate_key_string) { hx509_private_key key; - get_key(opt->key_string, + get_key(opt->out_key_string, opt->generate_key_string, opt->key_bits_integer, &key); @@ -1403,6 +1403,15 @@ hxtool_ca(struct certificate_sign_options *opt, int argc, char **argv) if (ret) hx509_err(context, ret, 1, "hx509_ca_tbs_init"); + if (opt->serial_number_string) { + heim_integer serialNumber; + + der_parse_hex_heim_integer(opt->serial_number_string, + &serialNumber); + ret = hx509_ca_tbs_set_serialnumber(context, tbs, &serialNumber); + der_free_heim_integer(&serialNumber); + } + ret = hx509_ca_tbs_set_spki(context, tbs, &spki); if (ret) hx509_err(context, ret, 1, "hx509_ca_tbs_set_spki");