X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=generateKeys.sh;h=d5d4750d30cb57d6f43f66f86b418a199395ac7d;hb=21a8fdc3409fbdd05342e95f507d8eab8609c710;hp=cf0fcad7a2aa7cd83b7652b2dc7617af68943fa6;hpb=c4ec3f02627ad85f5794d457936ca125ce13e506;p=nre.git diff --git a/generateKeys.sh b/generateKeys.sh index cf0fcad..d5d4750 100755 --- a/generateKeys.sh +++ b/generateKeys.sh @@ -5,6 +5,8 @@ set -e . structure . commonFunctions +mkdir -p generated +cd generated ####### create various extensions files for the various certificate types ###### cat < ca.cnf @@ -14,8 +16,8 @@ keyUsage = keyCertSign, cRLSign subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always -crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/root.crl -authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/root.crt +crlDistributionPoints=URI:http://g2.crl.${DOMAIN}/g2/root.crl +authorityInfoAccess = OCSP;URI:http://g2.ocsp.${DOMAIN},caIssuers;URI:http://g2.crt.${DOMAIN}/g2/root.crt TESTCA cat < subca.cnf @@ -25,8 +27,8 @@ keyUsage = keyCertSign, cRLSign subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always -crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/root.crl -authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/root.crt +crlDistributionPoints=URI:http://g2.crl.${DOMAIN}/g2/root.crl +authorityInfoAccess = OCSP;URI:http://g2.ocsp.${DOMAIN},caIssuers;URI:http://g2.crt.${DOMAIN}/g2/root.crt TESTCA @@ -42,7 +44,7 @@ rootSign root # generate the various sub-CAs for ca in $STRUCT_CAS; do - . CAs/$ca + . ../CAs/$ca genca "/CN=$name" $ca rootSign $ca done