Allow setting serialNumber (needed for reissuing certificates)
Change --key argument to --out-key. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19726 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -1366,7 +1366,7 @@ hxtool_ca(struct certificate_sign_options *opt, int argc, char **argv)
|
|||||||
if (opt->generate_key_string) {
|
if (opt->generate_key_string) {
|
||||||
hx509_private_key key;
|
hx509_private_key key;
|
||||||
|
|
||||||
get_key(opt->key_string,
|
get_key(opt->out_key_string,
|
||||||
opt->generate_key_string,
|
opt->generate_key_string,
|
||||||
opt->key_bits_integer,
|
opt->key_bits_integer,
|
||||||
&key);
|
&key);
|
||||||
@@ -1403,6 +1403,15 @@ hxtool_ca(struct certificate_sign_options *opt, int argc, char **argv)
|
|||||||
if (ret)
|
if (ret)
|
||||||
hx509_err(context, ret, 1, "hx509_ca_tbs_init");
|
hx509_err(context, ret, 1, "hx509_ca_tbs_init");
|
||||||
|
|
||||||
|
if (opt->serial_number_string) {
|
||||||
|
heim_integer serialNumber;
|
||||||
|
|
||||||
|
der_parse_hex_heim_integer(opt->serial_number_string,
|
||||||
|
&serialNumber);
|
||||||
|
ret = hx509_ca_tbs_set_serialnumber(context, tbs, &serialNumber);
|
||||||
|
der_free_heim_integer(&serialNumber);
|
||||||
|
}
|
||||||
|
|
||||||
ret = hx509_ca_tbs_set_spki(context, tbs, &spki);
|
ret = hx509_ca_tbs_set_spki(context, tbs, &spki);
|
||||||
if (ret)
|
if (ret)
|
||||||
hx509_err(context, ret, 1, "hx509_ca_tbs_set_spki");
|
hx509_err(context, ret, 1, "hx509_ca_tbs_set_spki");
|
||||||
|
Reference in New Issue
Block a user