generateTime.sh

   1 #!/bin/sh
   2
   3 . structure
   4 . commonFunctions
   5
   6 [ "$1" == "" ] && echo "Usage: $0 <year>" && exit 1
   7 year=$1
   8
   9 genTimeCA(){ #csr,ca to sign with,start,end
  10     cat <<TESTCA > timesubca.cnf
  11 basicConstraints = CA:true
  12 subjectKeyIdentifier = hash
  13 keyUsage = keyCertSign, cRLSign
  14 crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/$2.crl
  15 authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/$2.crt
  16 TESTCA
  17     caSign $1 $2 timesubca.cnf "$3" "$4"
  18     rm timesubca.cnf
  19 }
  20
  21 mkdir -p $year/ca
  22
  23 STARTDATE="${year:2}0101000000Z"
  24 ENDDATE="$((${year:2} + 2))0101000000Z"
  25
  26 . CAs/env
  27 genca "/CN=$name ${year}-1" $year/ca/env_${year}_1
  28 genTimeCA $year/ca/env_${year}_1.ca/key env "$STARTDATE" "$ENDDATE"
  29
  30 for ca in $STRUCT_CAS; do
  31     [ "$ca" == "env" ] && continue
  32     . CAs/$ca
  33     genKey "/CN=$name ${year}-1" $year/ca/${ca}_${year}_1
  34     genTimeCA $year/ca/${ca}_${year}_1 $ca "$STARTDATE" "$ENDDATE"
  35 done