FIX: minor cert structure fixups

[nre.git] / generateTime.sh

diff --git a/generateTime.sh b/generateTime.sh
index 572d27dba70878c72ff8a293c367313c50ceae91..0b0b0b4e8da46018c3e05aa1392635824acb166a 100755 (executable)
--- a/generateTime.sh
+++ b/generateTime.sh
@@ -9,8 +9,11 @@ year=$1
 genTimeCA(){ #csr,ca to sign with,start,end
     cat <<TESTCA > timesubca.cnf
 basicConstraints = CA:true
-subjectKeyIdentifier = hash
 keyUsage = keyCertSign, cRLSign
+
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always
+
 crlDistributionPoints=URI:http://g2.crl.cacert.org/g2/$2.crl
 authorityInfoAccess = OCSP;URI:http://g2.ocsp.cacert.org,caIssuers;URI:http://g2.crt.cacert.org/$2.crt
 TESTCA
@@ -21,8 +24,8 @@ TESTCA
 mkdir -p $year/ca
 
 
-STARTDATE="${year:2}"
-ENDDATE="$((${year:2} + 2))"
+STARTDATE="${year}"
+ENDDATE="$((${year} + 3))"
 
 for i in $TIME_IDX; do
     point=${points[${i}]}