58 lines
1.9 KiB
Bash
Executable File
58 lines
1.9 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# gencrls, crl config already done, see taoCerts.txt for setup
|
|
|
|
|
|
|
|
# caCrl
|
|
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out crl.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
|
|
|
|
# metadata
|
|
openssl crl -in crl.pem -text > tmp
|
|
mv tmp crl.pem
|
|
# install (only needed if working outside wolfssl)
|
|
#cp crl.pem ~/wolfssl/certs/crl/crl.pem
|
|
|
|
# caCrl server revoked
|
|
openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-cert.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
|
|
|
|
# caCrl server revoked generation
|
|
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out crl.revoked -keyfile ../ca-key.pem -cert ../ca-cert.pem
|
|
|
|
# metadata
|
|
openssl crl -in crl.revoked -text > tmp
|
|
mv tmp crl.revoked
|
|
# install (only needed if working outside wolfssl)
|
|
#cp crl.revoked ~/wolfssl/certs/crl/crl.revoked
|
|
|
|
# remove revoked so next time through the normal CA won't have server revoked
|
|
cp blank.index.txt demoCA/index.txt
|
|
|
|
# cliCrl
|
|
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out cliCrl.pem -keyfile ../client-key.pem -cert ../client-cert.pem
|
|
|
|
# metadata
|
|
openssl crl -in cliCrl.pem -text > tmp
|
|
mv tmp cliCrl.pem
|
|
# install (only needed if working outside wolfssl)
|
|
#cp cliCrl.pem ~/wolfssl/certs/crl/cliCrl.pem
|
|
|
|
# eccCliCRL
|
|
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out eccCliCRL.pem -keyfile ../ecc-client-key.pem -cert ../client-ecc-cert.pem
|
|
|
|
# metadata
|
|
openssl crl -in eccCliCRL.pem -text > tmp
|
|
mv tmp eccCliCRL.pem
|
|
# install (only needed if working outside wolfssl)
|
|
#cp eccCliCRL.pem ~/wolfssl/certs/crl/eccCliCRL.pem
|
|
|
|
# eccSrvCRL
|
|
openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out eccSrvCRL.pem -keyfile ../ecc-key.pem -cert ../server-ecc.pem
|
|
|
|
# metadata
|
|
openssl crl -in eccSrvCRL.pem -text > tmp
|
|
mv tmp eccSrvCRL.pem
|
|
# install (only needed if working outside wolfssl)
|
|
#cp eccSrvCRL.pem ~/wolfssl/certs/crl/eccSrvCRL.pem
|
|
|