bb5f88e0f6
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15817 ec53bebd-3082-4978-b11e-865c3cabbd6b
108 lines
2.0 KiB
Bash
108 lines
2.0 KiB
Bash
#!/bin/sh
|
|
# $Id$
|
|
#
|
|
|
|
gen_cert()
|
|
{
|
|
openssl req \
|
|
-new \
|
|
-subj "/CN=$1/C=SE" \
|
|
-config openssl.cnf \
|
|
-newkey rsa:1024 \
|
|
-sha1 \
|
|
-nodes \
|
|
-keyout out.key \
|
|
-out cert.req
|
|
|
|
if [ "$3" = "ca" ] ; then
|
|
ca_arg="-signkey out.key"
|
|
else
|
|
ca_arg="-CA $2.crt -CAkey $2.key -CAcreateserial"
|
|
fi
|
|
|
|
openssl x509 \
|
|
-req \
|
|
-days 3650 \
|
|
-in cert.req \
|
|
-extfile openssl.cnf \
|
|
-extensions $4 \
|
|
$ca_arg \
|
|
-out cert.crt
|
|
|
|
mv cert.crt $3.crt
|
|
mv out.key $3.key
|
|
}
|
|
|
|
gen_cert "hx509 Test Root CA" "root" "ca" "v3_ca"
|
|
gen_cert "Test cert" "ca" "test" "usr_cert"
|
|
gen_cert "Test cert KeyEncipherment" "ca" "test-ke-only" "usr_cert_ke"
|
|
gen_cert "Test cert DigitalSignature" "ca" "test-ds-only" "usr_cert_ds"
|
|
gen_cert "Sub CA" "ca" "sub-ca" "v3_ca"
|
|
gen_cert "Test sub cert" "sub-ca" "sub-cert" "usr_cert"
|
|
|
|
cat sub-ca.crt ca.crt > sub-ca-combined.crt
|
|
|
|
openssl pkcs12 \
|
|
-export \
|
|
-in test.crt \
|
|
-inkey test.key \
|
|
-passout pass:foobar \
|
|
-out test.p12 \
|
|
-name "friendlyname-test" \
|
|
-certfile ca.crt \
|
|
-caname ca
|
|
|
|
openssl pkcs12 \
|
|
-export \
|
|
-in sub-cert.crt \
|
|
-inkey sub-cert.key \
|
|
-passout pass:foobar \
|
|
-out sub-cert.p12 \
|
|
-name "friendlyname-sub-cert" \
|
|
-certfile sub-ca-combined.crt \
|
|
-caname sub-ca \
|
|
-caname ca
|
|
|
|
openssl smime \
|
|
-sign \
|
|
-nodetach \
|
|
-binary \
|
|
-in ../test_chain.in \
|
|
-signer test.crt \
|
|
-inkey test.key \
|
|
-outform DER \
|
|
-out test-signed-data
|
|
|
|
openssl smime \
|
|
-sign \
|
|
-nodetach \
|
|
-binary \
|
|
-in ../test_chain.in \
|
|
-signer test.crt \
|
|
-inkey test.key \
|
|
-noattr \
|
|
-outform DER \
|
|
-out test-signed-data-noattr
|
|
|
|
openssl smime \
|
|
-sign \
|
|
-nodetach \
|
|
-binary \
|
|
-in ../test_chain.in \
|
|
-signer test.crt \
|
|
-inkey test.key \
|
|
-noattr \
|
|
-nocerts \
|
|
-outform DER \
|
|
-out test-signed-data-noattr-nocerts
|
|
|
|
openssl smime \
|
|
-encrypt \
|
|
-nodetach \
|
|
-binary \
|
|
-in ../test_chain.in \
|
|
-outform DER \
|
|
-out test-enveloped-aes-128 \
|
|
-aes128 \
|
|
test.crt
|