From 645bdd837a0345a04d01a32e89b94571228a864b Mon Sep 17 00:00:00 2001 From: Kamil Dudka Date: Thu, 27 May 2010 23:33:19 +0200 Subject: tests/certs/scripts: generate also CRL ... and make it possible to do so without any user interaction --- tests/certs/scripts/genroot.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'tests/certs/scripts/genroot.sh') diff --git a/tests/certs/scripts/genroot.sh b/tests/certs/scripts/genroot.sh index b463e2c6e..6ac138873 100755 --- a/tests/certs/scripts/genroot.sh +++ b/tests/certs/scripts/genroot.sh @@ -40,8 +40,11 @@ SERIAL=`/usr/bin/env perl -e "$GETSERIAL"` echo SERIAL=$SERIAL PREFIX=$PREFIX DURATION=$DURATION KEYSIZE=$KEYSIZE -echo "openssl req -config $PREFIX-ca.prm -newkey rsa:$KEYSIZE -keyout $PREFIX-ca.key -out $PREFIX-ca.csr" -$OPENSSL req -config $PREFIX-ca.prm -newkey rsa:$KEYSIZE -keyout $PREFIX-ca.key -out $PREFIX-ca.csr +echo "openssl genrsa -out $PREFIX-ca.key $KEYSIZE -passout XXX" +openssl genrsa -out $PREFIX-ca.key $KEYSIZE -passout pass:secret + +echo "openssl req -config $PREFIX-ca.prm -new -key $PREFIX-ca.key -out $PREFIX-ca.csr" +$OPENSSL req -config $PREFIX-ca.prm -new -key $PREFIX-ca.key -out $PREFIX-ca.csr -passin pass:secret echo "openssl x509 -set_serial $SERIAL -extfile $PREFIX-ca.prm -days $DURATION -req -signkey $PREFIX-ca.key -in $PREFIX-ca.csr -out $PREFIX-$SERIAL.ca-cacert -sha1 " -- cgit v1.2.3