X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=generateInfra.sh;h=b283220bf3202f607d6c4726d7f212c88306f495;hb=55355f3aec3de71308daa0fa94b18ea5d5ea201a;hp=bd1b872483998c36c2f40e1e560fea9135ed2a3c;hpb=0d0307980a0f183c5ee3e73184593b1ed9640e1e;p=nre.git diff --git a/generateInfra.sh b/generateInfra.sh index bd1b872..b283220 100755 --- a/generateInfra.sh +++ b/generateInfra.sh @@ -9,15 +9,16 @@ year=$1 . commonFunctions CRL=" -crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/$year/env.crl -authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/$year/env.crt" +crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/$year/env-1.crl +authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/g2/$year/env-1.crt" cat < req.cnf basicConstraints = critical,CA:false keyUsage = keyEncipherment, digitalSignature extendedKeyUsage=serverAuth + subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid:always,issuer:always +authorityKeyIdentifier = keyid:always $CRL TESTCA @@ -25,8 +26,9 @@ cat < reqClient.cnf basicConstraints = critical,CA:false keyUsage = keyEncipherment, digitalSignature extendedKeyUsage=clientAuth + subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid:always,issuer:always +authorityKeyIdentifier = keyid:always $CRL TESTCA @@ -34,8 +36,9 @@ cat < reqMail.cnf basicConstraints = critical,CA:false keyUsage = keyEncipherment, digitalSignature extendedKeyUsage=emailProtection + subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid:always,issuer:always +authorityKeyIdentifier = keyid:always $CRL TESTCA