fic/server
2
0
Fork 0
Code Issues Pull Requests 10 Releases Wiki Activity

CA.sh: fixed newserver

Browse Source
This commit is contained in:
Li Chen 2013-11-29 03:15:33 +01:00
parent 9cc1110717
commit cc5bd08c37
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
misc/CA.sh
View File

@ -1,7 +1,7 @@
# TODO key usage # TODO key usage
if [[ -z "${TOP_DIR}" ]]; then if [[ -z "${TOP_DIR}" ]]; then
TOP_DIR=fic_pki TOP_DIR=pki
fi fi
if [[ -z "${OPENSSL_CONF}" ]]; then if [[ -z "${OPENSSL_CONF}" ]]; then
@ -51,7 +51,7 @@ case $1 in
exit 5 exit 5
fi fi
pass=`pwgen 10 1` pass=`pwgen -n -B -y 12 1`
openssl req -batch -new -keyout ${TOP_DIR}/private/${CAKEY} \ openssl req -batch -new -keyout ${TOP_DIR}/private/${CAKEY} \
-out ${TOP_DIR}/${CAREQ} -passout pass:$pass \ -out ${TOP_DIR}/${CAREQ} -passout pass:$pass \
@ -74,9 +74,11 @@ case $1 in
exit 2 exit 2
fi fi
sed -i 's/=.*#COMMONNAME/= FIC2014 Server #COMMONNAME/' $OPENSSL_CONF sed -i 's/=.*#COMMONNAME/= FIC2014 Server #COMMONNAME/' $OPENSSL_CONF
openssl req -batch -new -keyout server.key -out server.csr -days ${DAYS} openssl req -batch -new -keyout server.key -out server.csr \
-days ${DAYS} -config ${OPENSS_CONF}
echo -e "${GREEN}Signing the Server crt${COLOR_RST}" echo -e "${GREEN}Signing the Server crt${COLOR_RST}"
openssl ca -policy policy_match -out server.crt -infiles server.csr openssl ca -policy policy_match -config ${OPENSSL_CONF} \
-out server.crt -infiles server.csr
if [ $? -ne 0 ]; then if [ $? -ne 0 ]; then
echo -e "${RED}Signing failed for new server${COLOR_RST}" echo -e "${RED}Signing failed for new server${COLOR_RST}"
rm -rf server.key server.crt server.csr rm -rf server.key server.crt server.csr
@ -106,7 +108,7 @@ case $1 in
exit 5 exit 5
fi fi
pass=`pwgen 10 1` pass=`pwgen -n -B -y 12 1`
openssl req -batch -new -keyout ${2}.key -out ${2}.csr \ openssl req -batch -new -keyout ${2}.key -out ${2}.csr \
-config ${OPENSSL_CONF} -passout pass:$pass -days ${DAYS} -config ${OPENSSL_CONF} -passout pass:$pass -days ${DAYS}