test adding eku, ku and san to the certificate (https and pk-init)

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19581 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-12-30 14:50:24 +00:00
parent 993dacac92
commit d09a750407

View File

@@ -41,6 +41,7 @@ if ${hxtool} info | grep 'rsa: hcrypto null RSA' > /dev/null ; then
exit 77 exit 77
fi fi
echo "create certificate request"
${hxtool} request-create \ ${hxtool} request-create \
--subject="CN=Love,DC=it,DC=su,DC=se" \ --subject="CN=Love,DC=it,DC=su,DC=se" \
--key=$srcdir/data/key.der \ --key=$srcdir/data/key.der \
@@ -58,4 +59,31 @@ ${hxtool} verify --missing-revoke \
cert:FILE:cert-ee.der \ cert:FILE:cert-ee.der \
anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1 anchor:FILE:$srcdir/data/ca.crt > /dev/null || exit 1
echo "issue certificate (with https ekus)"
${hxtool} issue-certificate \
--ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
--subject="cn=foo" \
--type="https-server" \
--type="https-client" \
--req="pkcs10-request.der" \
--certificate="cert-ee.der" || exit 1
echo "issue certificate (pkinit KDC)"
${hxtool} issue-certificate \
--ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
--subject="cn=foo" \
--type="pkinit-kdc" \
--pk-init-principal="krbtgt/TEST.H5L.SE@TEST.H5L.SE" \
--req="pkcs10-request.der" \
--certificate="cert-ee.der" || exit 1
echo "issue certificate (pkinit client)"
${hxtool} issue-certificate \
--ca-certificate=FILE:$srcdir/data/ca.crt,$srcdir/data/ca.key \
--subject="cn=foo" \
--type="pkinit-client" \
--pk-init-principal="lha@TEST.H5L.SE" \
--req="pkcs10-request.der" \
--certificate="cert-ee.der" || exit 1
exit 0 exit 0