From b159ed234a3249212651db00a9a98ad0d45af3ca Mon Sep 17 00:00:00 2001 From: Paul Bakker Date: Wed, 14 Jan 2009 22:39:57 +0000 Subject: [PATCH] - Added test-ca generation script --- programs/ssl/test-ca/gen_test_ca.sh | 44 +++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100755 programs/ssl/test-ca/gen_test_ca.sh diff --git a/programs/ssl/test-ca/gen_test_ca.sh b/programs/ssl/test-ca/gen_test_ca.sh new file mode 100755 index 000000000..117b8b2f7 --- /dev/null +++ b/programs/ssl/test-ca/gen_test_ca.sh @@ -0,0 +1,44 @@ +#!/bin/sh +rm -rf index newcerts/*.pem serial *.req *.key *.crt crl.prm + +touch index +echo "01" > serial + +echo "Generating CA" +openssl req -config sslconf.txt -days 3653 -x509 -newkey rsa:2048 \ + -set_serial 0 -text -keyout test-ca.key -out test-ca.crt + +echo "Generating rest" +openssl genrsa -out server1.key 2048 +openssl genrsa -out server2.key 2048 +openssl genrsa -out client1.key 2048 +openssl genrsa -out client2.key 2048 + +echo "Generating requests" +openssl req -config sslconf.txt -new -key server1.key -out server1.req +openssl req -config sslconf.txt -new -key server2.key -out server2.req +openssl req -config sslconf.txt -new -key client1.key -out client1.req +openssl req -config sslconf.txt -new -key client2.key -out client2.req + +echo "Signing requests" +openssl ca -config sslconf.txt -in server1.req -out server1.crt +openssl ca -config sslconf.txt -in server2.req -out server2.crt +openssl ca -config sslconf.txt -in client1.req -out client1.crt +openssl ca -config sslconf.txt -in client2.req -out client2.crt + +echo "Revoking firsts" +openssl ca -config sslconf.txt -revoke server1.crt +openssl ca -config sslconf.txt -revoke client1.crt +openssl ca -config sslconf.txt -gencrl -out crl.pem + +echo "Verifying second" +openssl x509 -in server2.crt -text -noout +cat test-ca.crt crl.pem > ca_crl.pem +openssl verify -CAfile ca_crl.pem -crl_check server2.crt +rm ca_crl.pem + +echo "Generating PKCS12" +openssl pkcs12 -export -in client2.crt -inkey client2.key \ + -out client2.pfx + +rm *.old *.req