| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556 |
- #!/bin/sh
- openssl req \
- -new \
- -key root-ca-key.pem \
- -out root-ca-cert.csr \
- -subj "/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=wolfSSL root CA/emailAddress=info@wolfssl.com"
- openssl x509 \
- -req -in root-ca-cert.csr \
- -extfile openssl.cnf \
- -extensions v3_ca \
- -days 1000 \
- -signkey root-ca-key.pem \
- -set_serial 99 \
- -out root-ca-cert.pem
- rm root-ca-cert.csr
- openssl x509 -in root-ca-cert.pem -text > tmp.pem
- mv tmp.pem root-ca-cert.pem
- # $1 cert, $2 name, $3 ca, $4 extensions, $5 serial
- function update_cert() {
- openssl req \
- -new \
- -key $1-key.pem \
- -out $1-cert.csr \
- -subj "/C=US/ST=Washington/L=Seattle/O=wolfSSL/OU=Engineering/CN=$2/emailAddress=info@wolfssl.com"
- openssl x509 \
- -req -in $1-cert.csr \
- -extfile openssl.cnf \
- -extensions $4 \
- -days 1000 \
- -CA $3-cert.pem \
- -CAkey $3-key.pem \
- -set_serial $5 \
- -out $1-cert.pem
- rm $1-cert.csr
- openssl x509 -in $1-cert.pem -text > $1_tmp.pem
- mv $1_tmp.pem $1-cert.pem
- cat $3-cert.pem >> $1-cert.pem
- }
- update_cert intermediate1-ca "wolfSSL intermediate CA 1" root-ca v3_ca 01
- update_cert intermediate2-ca "wolfSSL intermediate CA 2" root-ca v3_ca 02
- update_cert intermediate3-ca "wolfSSL REVOKED intermediate CA" root-ca v3_ca 03 # REVOKED
- update_cert ocsp-responder "wolfSSL OCSP Responder" root-ca v3_ocsp 04
- update_cert server1 "www1.wolfssl.com" intermediate1-ca v3_req1 05
- update_cert server2 "www2.wolfssl.com" intermediate1-ca v3_req1 06 # REVOKED
- update_cert server3 "www3.wolfssl.com" intermediate2-ca v3_req2 07
- update_cert server4 "www4.wolfssl.com" intermediate2-ca v3_req2 08 # REVOKED
- update_cert server5 "www5.wolfssl.com" intermediate3-ca v3_req3 09
|
