Return to genroot.sh CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / curl / tests / certs / scripts

Annotation of embedaddon/curl/tests/certs/scripts/genroot.sh, revision 1.1

1.1     ! misho       1: #!/bin/bash
        !             2: 
        !             3: # (c) CopyRight 2000 - 2020, EdelWeb for EdelKey and OpenEvidence
        !             4: # Author: Peter Sylvester
        !             5: 
        !             6: # "libre" for integration with curl
        !             7: 
        !             8: OPENSSL=openssl
        !             9: if [ -f /usr/local/ssl/bin/openssl ] ; then
        !            10: OPENSSL=/usr/local/ssl/bin/openssl
        !            11: fi
        !            12: 
        !            13: USAGE="echo Usage is genroot.sh \<name\>"
        !            14: 
        !            15: HOME=`pwd`
        !            16: cd $HOME
        !            17: 
        !            18: KEYSIZE=2048
        !            19: DURATION=6000
        !            20: # The -sha256 option was introduced in OpenSSL 1.0.1
        !            21: DIGESTALGO=-sha256
        !            22: 
        !            23: PREFIX=$1
        !            24: if [ ".$PREFIX" = . ] ; then
        !            25:    echo No configuration prefix
        !            26:    NOTOK=1
        !            27: else
        !            28:    if [ ! -f $PREFIX-ca.prm ] ; then
        !            29:       echo No configuration file $PREFIX-ca.prm
        !            30:       NOTOK=1
        !            31:    fi
        !            32: fi
        !            33: 
        !            34: if [ ".$NOTOK" != . ] ; then
        !            35:    echo "Sorry, I can't do that for you."
        !            36:    $USAGE
        !            37:    exit
        !            38: fi
        !            39: 
        !            40: GETSERIAL="\$t = time ;\$d =  \$t . substr(\$t+$$ ,-4,4)-1;print \$d"
        !            41: SERIAL=`/usr/bin/env perl -e "$GETSERIAL"`
        !            42: 
        !            43: echo SERIAL=$SERIAL PREFIX=$PREFIX DURATION=$DURATION KEYSIZE=$KEYSIZE
        !            44: 
        !            45: echo "openssl genrsa -out $PREFIX-ca.key $KEYSIZE -passout XXX"
        !            46: openssl genrsa -out $PREFIX-ca.key $KEYSIZE -passout pass:secret
        !            47: 
        !            48: echo "openssl req -config $PREFIX-ca.prm -new -key $PREFIX-ca.key -out $PREFIX-ca.csr"
        !            49: $OPENSSL req -config $PREFIX-ca.prm -new -key $PREFIX-ca.key -out $PREFIX-ca.csr -passin pass:secret
        !            50: 
        !            51: echo "openssl x509 -set_serial $SERIAL -extfile $PREFIX-ca.prm -days $DURATION -req -signkey $PREFIX-ca.key -in $PREFIX-ca.csr -out $PREFIX-$SERIAL.ca-cacert $DIGESTALGO "
        !            52: 
        !            53: $OPENSSL x509  -set_serial $SERIAL -extfile $PREFIX-ca.prm -days $DURATION -req -signkey $PREFIX-ca.key -in $PREFIX-ca.csr -out $PREFIX-$SERIAL-ca.cacert $DIGESTALGO
        !            54: 
        !            55: echo "openssl x509 -text -in $PREFIX-$SERIAL-ca.cacert -nameopt multiline > $PREFIX-ca.cacert "
        !            56: $OPENSSL x509 -text -in $PREFIX-$SERIAL-ca.cacert -nameopt multiline > $PREFIX-ca.cacert
        !            57: 
        !            58: echo "openssl x509 -in $PREFIX-ca.cacert -outform der -out $PREFIX-ca.der "
        !            59: $OPENSSL x509 -in $PREFIX-ca.cacert -outform der -out $PREFIX-ca.der
        !            60: 
        !            61: echo "openssl x509 -in $PREFIX-ca.cacert -text -nameopt multiline > $PREFIX-ca.crt "
        !            62: 
        !            63: $OPENSSL x509 -in $PREFIX-ca.cacert -text -nameopt multiline > $PREFIX-ca.crt
        !            64: 
        !            65: echo "openssl x509 -noout -text -in $PREFIX-ca.cacert -nameopt multiline"
        !            66: $OPENSSL x509 -noout -text -in $PREFIX-ca.cacert -nameopt multiline
        !            67: 
        !            68: #$OPENSSL rsa -in ../keys/$PREFIX-ca.key -text -noout -pubout