From 9275975f0faea42befe9d26b29b08fceaed429a0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Fri, 28 Apr 2006 16:41:56 +0000
Subject: [PATCH] Generate pkinit certificates.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17344 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/hx509/data/gen-req.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/lib/hx509/data/gen-req.sh b/lib/hx509/data/gen-req.sh
index f73a441ed..42aef613b 100644
--- a/lib/hx509/data/gen-req.sh
+++ b/lib/hx509/data/gen-req.sh
@@ -1,6 +1,9 @@
 #!/bin/sh
 # $Id$
 #
+# This script need openssl 0.9.8a or newer, so it can parse the
+# otherName section for pkinit certificates.
+#
 
 gen_cert()
 {
@@ -72,6 +75,8 @@ gen_cert "/CN=Test cert/C=SE" "ca" "test" "usr"
 gen_cert "/CN=Revoke cert/C=SE" "ca" "revoke" "usr"
 gen_cert "/CN=Test cert KeyEncipherment/C=SE" "ca" "test-ke-only" "usr_ke"
 gen_cert "/CN=Test cert DigitalSignature/C=SE" "ca" "test-ds-only" "usr_ds"
+gen_cert "/CN=pkinit/C=SE" "ca" "pkinit" "pkinit_client"
+gen_cert "/CN=kdc/C=SE" "ca" "kdc" "pkinit_kdc"
 gen_cert "/CN=Sub CA/C=SE" "ca" "sub-ca" "subca"
 gen_cert "/CN=Test sub cert/C=SE" "sub-ca" "sub-cert" "usr"
 gen_cert "/C=SE/CN=Test cert/CN=proxy" "test" "proxy" "proxy_cert" proxy-test