diff options
Diffstat (limited to 'src/lib/libcrypto/util/mkcerts.sh')
-rw-r--r-- | src/lib/libcrypto/util/mkcerts.sh | 220 |
1 files changed, 0 insertions, 220 deletions
diff --git a/src/lib/libcrypto/util/mkcerts.sh b/src/lib/libcrypto/util/mkcerts.sh deleted file mode 100644 index 0184fcb70e..0000000000 --- a/src/lib/libcrypto/util/mkcerts.sh +++ /dev/null | |||
@@ -1,220 +0,0 @@ | |||
1 | #!/bin/sh | ||
2 | |||
3 | # This script will re-make all the required certs. | ||
4 | # cd apps | ||
5 | # sh ../util/mkcerts.sh | ||
6 | # mv ca-cert.pem pca-cert.pem ../certs | ||
7 | # cd .. | ||
8 | # cat certs/*.pem >>apps/server.pem | ||
9 | # cat certs/*.pem >>apps/server2.pem | ||
10 | # SSLEAY=`pwd`/apps/ssleay; export SSLEAY | ||
11 | # sh tools/c_rehash certs | ||
12 | # | ||
13 | |||
14 | CAbits=1024 | ||
15 | SSLEAY="../apps/openssl" | ||
16 | CONF="-config ../apps/openssl.cnf" | ||
17 | |||
18 | # create pca request. | ||
19 | echo creating $CAbits bit PCA cert request | ||
20 | $SSLEAY req $CONF \ | ||
21 | -new -md5 -newkey $CAbits \ | ||
22 | -keyout pca-key.pem \ | ||
23 | -out pca-req.pem -nodes >/dev/null <<EOF | ||
24 | AU | ||
25 | Queensland | ||
26 | . | ||
27 | CryptSoft Pty Ltd | ||
28 | . | ||
29 | Test PCA (1024 bit) | ||
30 | |||
31 | |||
32 | |||
33 | EOF | ||
34 | |||
35 | if [ $? != 0 ]; then | ||
36 | echo problems generating PCA request | ||
37 | exit 1 | ||
38 | fi | ||
39 | |||
40 | #sign it. | ||
41 | echo | ||
42 | echo self signing PCA | ||
43 | $SSLEAY x509 -md5 -days 1461 \ | ||
44 | -req -signkey pca-key.pem \ | ||
45 | -CAcreateserial -CAserial pca-cert.srl \ | ||
46 | -in pca-req.pem -out pca-cert.pem | ||
47 | |||
48 | if [ $? != 0 ]; then | ||
49 | echo problems self signing PCA cert | ||
50 | exit 1 | ||
51 | fi | ||
52 | echo | ||
53 | |||
54 | # create ca request. | ||
55 | echo creating $CAbits bit CA cert request | ||
56 | $SSLEAY req $CONF \ | ||
57 | -new -md5 -newkey $CAbits \ | ||
58 | -keyout ca-key.pem \ | ||
59 | -out ca-req.pem -nodes >/dev/null <<EOF | ||
60 | AU | ||
61 | Queensland | ||
62 | . | ||
63 | CryptSoft Pty Ltd | ||
64 | . | ||
65 | Test CA (1024 bit) | ||
66 | |||
67 | |||
68 | |||
69 | EOF | ||
70 | |||
71 | if [ $? != 0 ]; then | ||
72 | echo problems generating CA request | ||
73 | exit 1 | ||
74 | fi | ||
75 | |||
76 | #sign it. | ||
77 | echo | ||
78 | echo signing CA | ||
79 | $SSLEAY x509 -md5 -days 1461 \ | ||
80 | -req \ | ||
81 | -CAcreateserial -CAserial pca-cert.srl \ | ||
82 | -CA pca-cert.pem -CAkey pca-key.pem \ | ||
83 | -in ca-req.pem -out ca-cert.pem | ||
84 | |||
85 | if [ $? != 0 ]; then | ||
86 | echo problems signing CA cert | ||
87 | exit 1 | ||
88 | fi | ||
89 | echo | ||
90 | |||
91 | # create server request. | ||
92 | echo creating 512 bit server cert request | ||
93 | $SSLEAY req $CONF \ | ||
94 | -new -md5 -newkey 512 \ | ||
95 | -keyout s512-key.pem \ | ||
96 | -out s512-req.pem -nodes >/dev/null <<EOF | ||
97 | AU | ||
98 | Queensland | ||
99 | . | ||
100 | CryptSoft Pty Ltd | ||
101 | . | ||
102 | Server test cert (512 bit) | ||
103 | |||
104 | |||
105 | |||
106 | EOF | ||
107 | |||
108 | if [ $? != 0 ]; then | ||
109 | echo problems generating 512 bit server cert request | ||
110 | exit 1 | ||
111 | fi | ||
112 | |||
113 | #sign it. | ||
114 | echo | ||
115 | echo signing 512 bit server cert | ||
116 | $SSLEAY x509 -md5 -days 365 \ | ||
117 | -req \ | ||
118 | -CAcreateserial -CAserial ca-cert.srl \ | ||
119 | -CA ca-cert.pem -CAkey ca-key.pem \ | ||
120 | -in s512-req.pem -out server.pem | ||
121 | |||
122 | if [ $? != 0 ]; then | ||
123 | echo problems signing 512 bit server cert | ||
124 | exit 1 | ||
125 | fi | ||
126 | echo | ||
127 | |||
128 | # create 1024 bit server request. | ||
129 | echo creating 1024 bit server cert request | ||
130 | $SSLEAY req $CONF \ | ||
131 | -new -md5 -newkey 1024 \ | ||
132 | -keyout s1024key.pem \ | ||
133 | -out s1024req.pem -nodes >/dev/null <<EOF | ||
134 | AU | ||
135 | Queensland | ||
136 | . | ||
137 | CryptSoft Pty Ltd | ||
138 | . | ||
139 | Server test cert (1024 bit) | ||
140 | |||
141 | |||
142 | |||
143 | EOF | ||
144 | |||
145 | if [ $? != 0 ]; then | ||
146 | echo problems generating 1024 bit server cert request | ||
147 | exit 1 | ||
148 | fi | ||
149 | |||
150 | #sign it. | ||
151 | echo | ||
152 | echo signing 1024 bit server cert | ||
153 | $SSLEAY x509 -md5 -days 365 \ | ||
154 | -req \ | ||
155 | -CAcreateserial -CAserial ca-cert.srl \ | ||
156 | -CA ca-cert.pem -CAkey ca-key.pem \ | ||
157 | -in s1024req.pem -out server2.pem | ||
158 | |||
159 | if [ $? != 0 ]; then | ||
160 | echo problems signing 1024 bit server cert | ||
161 | exit 1 | ||
162 | fi | ||
163 | echo | ||
164 | |||
165 | # create 512 bit client request. | ||
166 | echo creating 512 bit client cert request | ||
167 | $SSLEAY req $CONF \ | ||
168 | -new -md5 -newkey 512 \ | ||
169 | -keyout c512-key.pem \ | ||
170 | -out c512-req.pem -nodes >/dev/null <<EOF | ||
171 | AU | ||
172 | Queensland | ||
173 | . | ||
174 | CryptSoft Pty Ltd | ||
175 | . | ||
176 | Client test cert (512 bit) | ||
177 | |||
178 | |||
179 | |||
180 | EOF | ||
181 | |||
182 | if [ $? != 0 ]; then | ||
183 | echo problems generating 512 bit client cert request | ||
184 | exit 1 | ||
185 | fi | ||
186 | |||
187 | #sign it. | ||
188 | echo | ||
189 | echo signing 512 bit client cert | ||
190 | $SSLEAY x509 -md5 -days 365 \ | ||
191 | -req \ | ||
192 | -CAcreateserial -CAserial ca-cert.srl \ | ||
193 | -CA ca-cert.pem -CAkey ca-key.pem \ | ||
194 | -in c512-req.pem -out client.pem | ||
195 | |||
196 | if [ $? != 0 ]; then | ||
197 | echo problems signing 512 bit client cert | ||
198 | exit 1 | ||
199 | fi | ||
200 | |||
201 | echo cleanup | ||
202 | |||
203 | cat pca-key.pem >> pca-cert.pem | ||
204 | cat ca-key.pem >> ca-cert.pem | ||
205 | cat s512-key.pem >> server.pem | ||
206 | cat s1024key.pem >> server2.pem | ||
207 | cat c512-key.pem >> client.pem | ||
208 | |||
209 | for i in pca-cert.pem ca-cert.pem server.pem server2.pem client.pem | ||
210 | do | ||
211 | $SSLEAY x509 -issuer -subject -in $i -noout >$$ | ||
212 | cat $$ | ||
213 | /bin/cat $i >>$$ | ||
214 | /bin/mv $$ $i | ||
215 | done | ||
216 | |||
217 | #/bin/rm -f *key.pem *req.pem *.srl | ||
218 | |||
219 | echo Finished | ||
220 | |||