X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=generateTime.sh;h=08032d40723871cb8b6d5c9d946ff20d8bd9bbc3;hb=333f02148290de089bd59cbdc2f8ac7e50b3ee66;hp=c7a98de61520eadf1ba4bb96ed0a0770e029e06d;hpb=69a024b8652e0f0c5203954f322b79a3f0096446;p=nre.git diff --git a/generateTime.sh b/generateTime.sh index c7a98de..08032d4 100755 --- a/generateTime.sh +++ b/generateTime.sh @@ -9,10 +9,13 @@ year=$1 genTimeCA(){ #csr,ca to sign with,start,end cat < timesubca.cnf basicConstraints = CA:true -subjectKeyIdentifier = hash keyUsage = keyCertSign, cRLSign + +subjectKeyIdentifier = hash +authorityKeyIdentifier = keyid:always + crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/$2.crl -authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/$2.crt +authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/g2/$2.crt TESTCA caSign $1 $2 timesubca.cnf "$3" "$4" rm timesubca.cnf @@ -20,16 +23,20 @@ TESTCA mkdir -p $year/ca -STARTDATE="${year:2}0101000000Z" -ENDDATE="$((${year:2} + 2))0101000000Z" -. CAs/env -genca "/CN=$name ${year}-1" $year/ca/env_${year}_1 -genTimeCA $year/ca/env_${year}_1.ca/key env "$STARTDATE" "$ENDDATE" +STARTDATE="${year}" +ENDDATE="$((${year} + 3))" -for ca in $STRUCT_CAS; do - [ "$ca" == "env" ] && continue - . CAs/$ca - genKey "/CN=$name ${year}-1" $year/ca/${ca}_${year}_1 - genTimeCA $year/ca/${ca}_${year}_1 $ca "$STARTDATE" "$ENDDATE" +for i in $TIME_IDX; do + point=${points[${i}]} + . CAs/env + genca "/CN=$name ${year}-${i}" $year/ca/env_${year}_${i} + genTimeCA $year/ca/env_${year}_${i}.ca/key env "$STARTDATE$point" "$ENDDATE$point" + + for ca in $STRUCT_CAS; do + [ "$ca" == "env" ] && continue + . CAs/$ca + genKey "/CN=$name ${year}-${i}" $year/ca/${ca}_${year}_${i} + genTimeCA $year/ca/${ca}_${year}_${i} $ca "$STARTDATE$point" "$ENDDATE$point" + done done