Adjusted gencrls and renewcerts to add a revoked server cert

certs/crl/gencrls.sh

@@ -5,6 +5,9 @@
 
 
 # caCrl
+# revoke server-revoked-cert.pem
+openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-revoked-cert.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
+
 openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out crl.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
 
 # metadata

certs/renewcerts.sh

@@ -98,6 +98,23 @@ function run_renewcerts(){
     mv srv_tmp.pem server-cert.pem
     cat ca_tmp.pem >> server-cert.pem
     rm ca_tmp.pem
+    ###########################################################
+    ########## update and sign server-revoked-key.pem ################
+    ###########################################################
+    echo "Updating server-revoked-cert.pem"
+    echo ""
+    #pipe the following arguments to openssl req...
+    echo -e "US\nMontana\nBozeman\nwolfSSL\nSupport\nwww.wolfssl.com\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key server-revoked-key.pem -nodes > server-revoked-req.pem
+
+    openssl x509 -req -in server-revoked-req.pem -extfile wolfssl.cnf -extensions wolfssl_opts -days 1000 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 02 > server-revoked-cert.pem
+
+    rm server-revoked-req.pem
+
+    openssl x509 -in ca-cert.pem -text > ca_tmp.pem
+    openssl x509 -in server-revoked-cert.pem -text > srv_tmp.pem
+    mv srv_tmp.pem server-revoked-cert.pem
+    cat ca_tmp.pem >> server-revoked-cert.pem
+    rm ca_tmp.pem
     ############################################################
     ########## update and sign the server-ecc-rsa.pem ##########
     ############################################################

certs/server-revoked-cert.pem

@@ -0,0 +1,172 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com/emailAddress=info@wolfssl.com
+        Validity
+            Not Before: Jul 21 22:43:25 2015 GMT
+            Not After : Apr 16 22:43:25 2018 GMT
+        Subject: C=US, ST=Montana, L=Bozeman, O=wolfSSL, OU=Support, CN=www.wolfssl.com/emailAddress=info@wolfssl.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b0:14:16:3a:43:dd:e1:50:45:4f:cf:80:b3:dd:
+                    66:96:c7:e9:f4:dc:de:b6:6b:24:1b:76:48:ac:c6:
+                    23:a5:a7:e4:05:19:bd:b7:f6:de:fa:ff:ed:5b:3c:
+                    79:8a:a9:d5:f1:fb:eb:c8:b1:e4:b2:ab:52:72:89:
+                    93:22:5c:ba:cd:8a:36:2a:2c:d1:40:ec:a8:66:0e:
+                    c3:76:cd:e7:b3:a3:0a:1e:dd:4a:07:82:17:81:ba:
+                    de:57:ce:b6:32:81:c7:bd:11:bb:e9:15:22:4e:e2:
+                    16:ac:e3:d4:c0:68:88:6c:11:fc:c2:bd:1b:db:1d:
+                    fd:e6:43:c7:1b:33:b8:f4:e5:1b:59:39:12:38:4d:
+                    2d:9b:64:68:98:fc:8d:72:12:91:f2:24:25:6c:4c:
+                    4a:48:57:92:00:cc:7e:d8:d4:3d:b8:1d:f2:9e:ea:
+                    b2:23:0f:51:0f:11:41:1c:f5:27:00:1b:08:7a:12:
+                    3a:05:5b:03:24:fe:b1:7b:20:fa:e4:a8:58:c6:ca:
+                    ce:7f:be:95:01:12:9d:05:e6:39:13:1b:c0:3e:56:
+                    2e:2b:9f:76:37:de:de:9b:e0:0d:7a:63:0d:a7:22:
+                    58:db:31:c7:f7:b4:46:5c:ba:b6:4b:48:b1:18:9a:
+                    68:b3:63:47:fd:af:12:5f:2f:fe:10:cb:58:2b:33:
+                    68:85
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                D8:09:2B:59:E1:2A:EE:D9:EE:40:AA:9C:AB:F0:5D:28:09:4F:22:BB
+            X509v3 Authority Key Identifier: 
+                keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
+                DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
+                serial:91:68:6B:F0:94:88:41:A2
+
+            X509v3 Basic Constraints: 
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         21:34:8d:f0:1c:89:16:18:69:b6:5a:6a:c5:56:b0:94:24:19:
+         80:52:df:54:1c:2e:63:2a:77:e2:52:76:7c:2c:d8:42:9f:13:
+         be:26:ab:d1:48:1c:52:91:df:33:57:aa:c9:5e:8e:bd:e3:1b:
+         1b:6d:97:26:e8:35:7c:06:e2:11:d2:ff:91:63:53:09:dc:62:
+         fa:57:9e:75:69:3d:a8:b9:3b:6e:52:b9:c8:93:f1:79:ef:4b:
+         7f:71:26:ab:e4:30:a5:bd:d3:9b:79:f5:f0:05:3f:f5:66:92:
+         c3:e2:3f:b6:08:bc:f5:58:77:34:4d:6e:cf:66:2a:b3:7c:e3:
+         ea:15:b7:92:e2:74:b6:39:44:9e:c5:ea:e5:21:70:a0:47:fc:
+         20:7d:79:0a:a0:a8:3c:51:c6:2d:5f:a3:be:b4:e2:ba:52:27:
+         7c:8f:79:b6:ae:b3:e2:4c:35:85:69:cd:d5:3b:ac:2d:1b:e1:
+         f9:15:97:9a:a3:94:3f:70:50:62:49:b5:52:61:f8:cf:31:2b:
+         fb:83:b9:df:20:55:8d:73:ea:26:eb:a4:ed:11:9e:52:0f:04:
+         40:4d:94:0a:dc:62:f3:3b:88:e2:4d:eb:bd:a2:27:25:a8:63:
+         54:f7:52:e3:47:59:a1:bc:f7:7f:81:16:ec:86:79:9b:73:f6:
+         96:ec:16:62
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 10477743214105739682 (0x91686bf0948841a2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com/emailAddress=info@wolfssl.com
+        Validity
+            Not Before: Jul 21 22:43:25 2015 GMT
+            Not After : Apr 16 22:43:25 2018 GMT
+        Subject: C=US, ST=Montana, L=Bozeman, O=Sawtooth, OU=Consulting, CN=www.wolfssl.com/emailAddress=info@wolfssl.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bf:0c:ca:2d:14:b2:1e:84:42:5b:cd:38:1f:4a:
+                    f2:4d:75:10:f1:b6:35:9f:df:ca:7d:03:98:d3:ac:
+                    de:03:66:ee:2a:f1:d8:b0:7d:6e:07:54:0b:10:98:
+                    21:4d:80:cb:12:20:e7:cc:4f:de:45:7d:c9:72:77:
+                    32:ea:ca:90:bb:69:52:10:03:2f:a8:f3:95:c5:f1:
+                    8b:62:56:1b:ef:67:6f:a4:10:41:95:ad:0a:9b:e3:
+                    a5:c0:b0:d2:70:76:50:30:5b:a8:e8:08:2c:7c:ed:
+                    a7:a2:7a:8d:38:29:1c:ac:c7:ed:f2:7c:95:b0:95:
+                    82:7d:49:5c:38:cd:77:25:ef:bd:80:75:53:94:3c:
+                    3d:ca:63:5b:9f:15:b5:d3:1d:13:2f:19:d1:3c:db:
+                    76:3a:cc:b8:7d:c9:e5:c2:d7:da:40:6f:d8:21:dc:
+                    73:1b:42:2d:53:9c:fe:1a:fc:7d:ab:7a:36:3f:98:
+                    de:84:7c:05:67:ce:6a:14:38:87:a9:f1:8c:b5:68:
+                    cb:68:7f:71:20:2b:f5:a0:63:f5:56:2f:a3:26:d2:
+                    b7:6f:b1:5a:17:d7:38:99:08:fe:93:58:6f:fe:c3:
+                    13:49:08:16:0b:a7:4d:67:00:52:31:67:23:4e:98:
+                    ed:51:45:1d:b9:04:d9:0b:ec:d8:28:b3:4b:bd:ed:
+                    36:79
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
+            X509v3 Authority Key Identifier: 
+                keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
+                DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
+                serial:91:68:6B:F0:94:88:41:A2
+
+            X509v3 Basic Constraints: 
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         a0:e4:8f:5e:79:82:10:b4:58:d1:67:5e:cb:d0:7a:b5:f6:be:
+         9c:27:f3:c7:61:78:44:58:06:ff:09:fb:e6:08:f0:34:55:dd:
+         6a:77:92:1a:7b:ef:b8:ed:db:9f:14:f8:b8:af:e9:3e:60:ba:
+         90:90:4c:ef:60:01:5e:76:01:64:f0:e5:19:2f:0b:f4:89:a0:
+         65:fc:d2:28:3c:ff:7c:ea:07:39:6f:bf:56:c2:52:bd:5b:64:
+         21:87:39:75:6e:8f:62:b7:6e:18:e9:5c:4d:f3:16:c8:7a:4e:
+         d2:d3:d3:55:c0:63:84:18:83:6c:2a:18:a6:ca:d6:02:d6:29:
+         88:2a:f7:69:f0:0f:f1:dc:40:ad:88:2f:f6:ab:03:c2:a6:04:
+         7e:bf:12:1e:19:c9:fe:d3:c6:13:23:10:9a:f0:76:7e:d1:89:
+         b1:52:5c:17:06:2f:37:13:25:97:da:67:43:0d:e4:c7:d7:1c:
+         a3:7e:f8:59:97:fa:c2:12:17:07:95:09:ad:fa:a9:23:29:77:
+         f0:3d:29:e0:0c:77:a8:ca:db:e3:fa:b4:5a:7d:a7:92:3b:cb:
+         95:c2:aa:36:ec:ff:f2:a3:b0:32:b8:1e:26:96:76:07:cd:10:
+         04:8b:d4:5a:14:63:10:dd:2a:51:80:b2:2a:ba:0a:f8:51:47:
+         92:a4:21:04
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----

certs/server-revoked-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAsBQWOkPd4VBFT8+As91mlsfp9NzetmskG3ZIrMYjpafkBRm9
+t/be+v/tWzx5iqnV8fvryLHksqtScomTIly6zYo2KizRQOyoZg7Dds3ns6MKHt1K
+B4IXgbreV862MoHHvRG76RUiTuIWrOPUwGiIbBH8wr0b2x395kPHGzO49OUbWTkS
+OE0tm2RomPyNchKR8iQlbExKSFeSAMx+2NQ9uB3ynuqyIw9RDxFBHPUnABsIehI6
+BVsDJP6xeyD65KhYxsrOf76VARKdBeY5ExvAPlYuK592N97em+ANemMNpyJY2zHH
+97RGXLq2S0ixGJpos2NH/a8SXy/+EMtYKzNohQIDAQABAoIBAQCfamBBekZ9gxZt
+ztmgfvgt1WutZPdCwzgaoPnlazLE/X9FWuvYjeuN5n44V0VXVLK99q6fsufzF4d6
+6bHLr5b1Fog5oQAHPvysAfvYKU345sj37rPinla3/r7lUuLEUZnMRS0TNy4rqyiK
+eW+akEnLRnHIwjxhIwNIId83cpmnJfE7ZV7svZvk6Ctc//prFa/Y2AwkZcM2j2iG
+xc4kOXr0Y8DE4FYQEZgdJCoYfVDihcwtVXUGm+ZMBNhLzK/KuSxdjL6ySzdCSE9M
+mS4ZJPManR9LOIGsKlFsJrGWnFOm/GOMkzdBSLoEqRogHhYsvn7oDnLMHqPA/gE0
+M85ytBkVAoGBAOO/tTCd94kDfkXar+5+KvcYwQbwnMIbrN0TiIudpaSnE0dBFqU3
+oNC2K+PoGBgwEsEr2ThZCMAbz7NQJYmmNlNlSMNBzeud59F3BqMk3J6k62E0+Fnt
+C8OFfZ8V0vbdGehmeArEqHDcRJZBFsrUWb2/9/j4OYpnsozkp6H1pWQrAoGBAMXr
+jouX1qXLfKvYEpOKaSf+yjfULjT33ib885Nw2xlRzI6wkjHFsb8DERK36PA3CakU
+cdXb923tMMlLoCvSdDd6Qnx1TLRbYaJSFaOLt2we94AvjHtijM6vO7ftd1XvRWer
+/Ip9NT9X1NZxP/NTyUL3DgRmXE4L32fr2FFQEJ4PAoGBAKr2QeFY83RatvNhEigJ
+dd8/Kcc337SmacEa5KlJkgpjkMkwRvuHIqUJ2zCeDVg63hk7/TebPkJXnjaQt1z4
+9Fbt9Qz93MI+KsLGgqj9Bs/gJQE3biazFt2S25YMH+1IVCZspTgQIBF4h9Py0FU5
+ypPyAwdV7nvDE/lHu76MU7c5AoGBALUxR5ioc0vplMNF1wvXpRmGet7Nk1fOrESJ
+QvzyTsNJTbo8EDscv/Mc/Z5jXA++c0uleenNrSGoCgffAk3cJ6U6em+ye3yKREH0
+X/cPy+ZiGzfxT+0NddcqOcPS1HOJz8Jvg43Nvte0sxd3KpK7W//AacbBZzPUTry2
+/5zBbdUlAoGAYglAtoHIC0mQxAe6PXy/QRmgj87fPGsbVFOUwBf8Il2UKpfX9blv
+0rHb0kenc/DP7ZHZTgdc5qGgRyg0d3+O7W2rWTv1MiX85rUE03TCcyC2l1+M+iyx
+6IdHDjYwa4Kt0nT1JxEMjJxe1uhzJfgYJlcz5Iy4ff0xb8/aH0veedc=
+-----END RSA PRIVATE KEY-----