6 [ "$1" == "" ] && echo "Usage: $0 <year>" && exit 1
9 genTimeCA(){ #csr,ca to sign with,start,end
10 cat <<TESTCA > timesubca.cnf
11 basicConstraints = CA:true
12 keyUsage = keyCertSign, cRLSign
14 subjectKeyIdentifier = hash
15 authorityKeyIdentifier = keyid:always
17 crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/$2.crl
18 authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/g2/$2.crt
20 caSign $1 $2 timesubca.cnf "$3" "$4"
28 ENDDATE="$((${year} + 3))"
30 for i in $TIME_IDX; do
33 genca "/CN=$name ${year}-${i}" $year/ca/env_${year}_${i}
34 genTimeCA $year/ca/env_${year}_${i}.ca/key env "$STARTDATE$point" "$ENDDATE$point"
36 for ca in $STRUCT_CAS; do
37 [ "$ca" == "env" ] && continue
39 genKey "/CN=$name ${year}-${i}" $year/ca/${ca}_${year}_${i}
40 genTimeCA $year/ca/${ca}_${year}_${i} $ca "$STARTDATE$point" "$ENDDATE$point"