Home Explore Help
Sign In
RISCI_ATOM
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Files Issues 14 Wiki
Tree: ae54bae2fa
Branches Tags
wolfssl
/
certs
/
test-pathlen
/
assemble-chains.sh

assemble-chains.sh 10 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216 
  1. #!/bin/bash
    2. 

  2. #
    3. 

  3. # assemble-chains.sh
    4. 

  4. # Create certs and assemble all the certificate CA path test cert chains.
    5. 

  5. 

  6. 

  7. ###########################################################
    8. 

  8. ########## update server-0-ca.pem          ################
    9. 

  9. ###########################################################
    10. 

  10. echo "Updating server-0-ca.pem"
    11. 

  11. echo ""
    12. 

  12. #pipe the following arguments to openssl req...
    13. 

  13. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 0 CA\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-0-ca-req.pem
    14. 

  14. 

  15. openssl x509 -req -in server-0-ca-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions pathlen_0 -days 1000 -CA ../ca-cert.pem -CAkey ../ca-key.pem -set_serial 100 -sha1 > server-0-ca.pem
    16. 

  16. 

  17. rm server-0-ca-req.pem
    18. 

  18. openssl x509 -in server-0-ca.pem -text > ca_tmp.pem
    19. 

  19. mv ca_tmp.pem server-0-ca.pem
    20. 

  20. 

  21. 

  22. ###########################################################
    23. 

  23. ########## update server-0-cert.pem        ################
    24. 

  24. ###########################################################
    25. 

  25. echo "Updating server-0-cert.pem"
    26. 

  26. echo ""
    27. 

  27. #pipe the following arguments to openssl req...
    28. 

  28. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 0\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-0-cert-req.pem
    29. 

  29. 

  30. openssl x509 -req -in server-0-cert-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions test_pathlen -days 1000 -CA server-0-ca.pem -CAkey ../server-key.pem -set_serial 101 -sha1 > server-0-cert.pem
    31. 

  31. 

  32. rm server-0-cert-req.pem
    33. 

  33. openssl x509 -in server-0-cert.pem -text > cert_tmp.pem
    34. 

  34. mv cert_tmp.pem server-0-cert.pem
    35. 

  35. 

  36. 

  37. ###########################################################
    38. 

  38. ########## update server-1-ca.pem          ################
    39. 

  39. ###########################################################
    40. 

  40. echo "Updating server-1-ca.pem"
    41. 

  41. echo ""
    42. 

  42. #pipe the following arguments to openssl req...
    43. 

  43. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 1 CA\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-1-ca-req.pem
    44. 

  44. 

  45. openssl x509 -req -in server-1-ca-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions pathlen_1 -days 1000 -CA ../ca-cert.pem -CAkey ../ca-key.pem -set_serial 102 -sha1 > server-1-ca.pem
    46. 

  46. 

  47. rm server-1-ca-req.pem
    48. 

  48. openssl x509 -in server-1-ca.pem -text > ca_tmp.pem
    49. 

  49. mv ca_tmp.pem server-1-ca.pem
    50. 

  50. 

  51. 

  52. ###########################################################
    53. 

  53. ########## update server-1-cert.pem        ################
    54. 

  54. ###########################################################
    55. 

  55. echo "Updating server-1-cert.pem"
    56. 

  56. echo ""
    57. 

  57. #pipe the following arguments to openssl req...
    58. 

  58. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 1\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-1-cert-req.pem
    59. 

  59. 

  60. openssl x509 -req -in server-1-cert-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions test_pathlen -days 1000 -CA server-1-ca.pem -CAkey ../server-key.pem -set_serial 105 -sha1 > server-1-cert.pem
    61. 

  61. 

  62. rm server-1-cert-req.pem
    63. 

  63. openssl x509 -in server-1-cert.pem -text > cert_tmp.pem
    64. 

  64. mv cert_tmp.pem server-1-cert.pem
    65. 

  65. 

  66. 

  67. ###########################################################
    68. 

  68. ########## update server-0-1-ca.pem        ################
    69. 

  69. ###########################################################
    70. 

  70. echo "Updating server-0-1-ca.pem"
    71. 

  71. echo ""
    72. 

  72. #pipe the following arguments to openssl req...
    73. 

  73. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 0-1 CA\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-0-1-ca-req.pem
    74. 

  74. 

  75. openssl x509 -req -in server-0-1-ca-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions pathlen_1 -days 1000 -CA server-0-ca.pem -CAkey ../server-key.pem -set_serial 110 -sha1 > server-0-1-ca.pem
    76. 

  76. 

  77. rm server-0-1-ca-req.pem
    78. 

  78. openssl x509 -in server-0-1-ca.pem -text > ca_tmp.pem
    79. 

  79. mv ca_tmp.pem server-0-1-ca.pem
    80. 

  80. 

  81. 

  82. ###########################################################
    83. 

  83. ########## update server-0-1-cert.pem      ################
    84. 

  84. ###########################################################
    85. 

  85. echo "Updating server-0-1-cert.pem"
    86. 

  86. echo ""
    87. 

  87. #pipe the following arguments to openssl req...
    88. 

  88. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 0-1\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-0-1-cert-req.pem
    89. 

  89. 

  90. openssl x509 -req -in server-0-1-cert-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions test_pathlen -days 1000 -CA server-0-1-ca.pem -CAkey ../server-key.pem -set_serial 111 -sha1 > server-0-1-cert.pem
    91. 

  91. 

  92. rm server-0-1-cert-req.pem
    93. 

  93. openssl x509 -in server-0-1-cert.pem -text > cert_tmp.pem
    94. 

  94. mv cert_tmp.pem server-0-1-cert.pem
    95. 

  95. 

  96. 

  97. ###########################################################
    98. 

  98. ########## update server-1-0-ca.pem        ################
    99. 

  99. ###########################################################
    100. 

  100. echo "Updating server-1-0-ca.pem"
    101. 

  101. echo ""
    102. 

  102. #pipe the following arguments to openssl req...
    103. 

  103. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 1-0 CA\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-1-0-ca-req.pem
    104. 

  104. 

  105. openssl x509 -req -in server-1-0-ca-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions pathlen_0 -days 1000 -CA server-1-ca.pem -CAkey ../server-key.pem -set_serial 103 -sha1 > server-1-0-ca.pem
    106. 

  106. 

  107. rm server-1-0-ca-req.pem
    108. 

  108. openssl x509 -in server-1-0-ca.pem -text > ca_tmp.pem
    109. 

  109. mv ca_tmp.pem server-1-0-ca.pem
    110. 

  110. 

  111. 

  112. ###########################################################
    113. 

  113. ########## update server-1-0-cert.pem      ################
    114. 

  114. ###########################################################
    115. 

  115. echo "Updating server-1-0-cert.pem"
    116. 

  116. echo ""
    117. 

  117. #pipe the following arguments to openssl req...
    118. 

  118. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 1-0\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-1-0-cert-req.pem
    119. 

  119. 

  120. openssl x509 -req -in server-1-0-cert-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions test_pathlen -days 1000 -CA server-1-0-ca.pem -CAkey ../server-key.pem -set_serial 104 -sha1 > server-1-0-cert.pem
    121. 

  121. 

  122. rm server-1-0-cert-req.pem
    123. 

  123. openssl x509 -in server-1-0-cert.pem -text > cert_tmp.pem
    124. 

  124. mv cert_tmp.pem server-1-0-cert.pem
    125. 

  125. 

  126. 

  127. ###########################################################
    128. 

  128. ########## update server-127-ca.pem        ################
    129. 

  129. ###########################################################
    130. 

  130. echo "Updating server-127-ca.pem"
    131. 

  131. echo ""
    132. 

  132. #pipe the following arguments to openssl req...
    133. 

  133. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 127 CA\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-127-ca-req.pem
    134. 

  134. 

  135. openssl x509 -req -in server-127-ca-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions pathlen_127 -days 1000 -CA ../ca-cert.pem -CAkey ../ca-key.pem -set_serial 106 -sha1 > server-127-ca.pem
    136. 

  136. 

  137. rm server-127-ca-req.pem
    138. 

  138. openssl x509 -in server-127-ca.pem -text > ca_tmp.pem
    139. 

  139. mv ca_tmp.pem server-127-ca.pem
    140. 

  140. 

  141. 

  142. ###########################################################
    143. 

  143. ########## update server-127-cert.pem      ################
    144. 

  144. ###########################################################
    145. 

  145. echo "Updating server-127-cert.pem"
    146. 

  146. echo ""
    147. 

  147. #pipe the following arguments to openssl req...
    148. 

  148. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 127\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-127-cert-req.pem
    149. 

  149. 

  150. openssl x509 -req -in server-127-cert-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions test_pathlen -days 1000 -CA server-127-ca.pem -CAkey ../server-key.pem -set_serial 107 -sha1 > server-127-cert.pem
    151. 

  151. 

  152. rm server-127-cert-req.pem
    153. 

  153. openssl x509 -in server-127-cert.pem -text > cert_tmp.pem
    154. 

  154. mv cert_tmp.pem server-127-cert.pem
    155. 

  155. 

  156. 

  157. ###########################################################
    158. 

  158. ########## update server-128-ca.pem        ################
    159. 

  159. ###########################################################
    160. 

  160. echo "Updating server-128-ca.pem"
    161. 

  161. echo ""
    162. 

  162. #pipe the following arguments to openssl req...
    163. 

  163. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 128 CA\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-128-ca-req.pem
    164. 

  164. 

  165. openssl x509 -req -in server-128-ca-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions pathlen_128 -days 1000 -CA ../ca-cert.pem -CAkey ../ca-key.pem -set_serial 106 -sha1 > server-128-ca.pem
    166. 

  166. 

  167. rm server-128-ca-req.pem
    168. 

  168. openssl x509 -in server-128-ca.pem -text > ca_tmp.pem
    169. 

  169. mv ca_tmp.pem server-128-ca.pem
    170. 

  170. 

  171. 

  172. ###########################################################
    173. 

  173. ########## update server-128-cert.pem      ################
    174. 

  174. ###########################################################
    175. 

  175. echo "Updating server-128-cert.pem"
    176. 

  176. echo ""
    177. 

  177. #pipe the following arguments to openssl req...
    178. 

  178. echo -e "US\nWashington\nSeattle\nwolfSSL Inc.\nEngineering\nServer 128\ninfo@wolfssl.com\n.\n.\n" | openssl req -new -key ../server-key.pem -nodes -sha1 > server-128-cert-req.pem
    179. 

  179. 

  180. openssl x509 -req -in server-128-cert-req.pem -extfile ../renewcerts/wolfssl.cnf -extensions test_pathlen -days 1000 -CA server-128-ca.pem -CAkey ../server-key.pem -set_serial 107 -sha1 > server-128-cert.pem
    181. 

  181. 

  182. rm server-128-cert-req.pem
    183. 

  183. openssl x509 -in server-128-cert.pem -text > cert_tmp.pem
    184. 

  184. mv cert_tmp.pem server-128-cert.pem
    185. 

  185. 

  186. 

  187. ###########################################################
    188. 

  188. ########## Assemble Chains                 ################
    189. 

  189. ###########################################################
    190. 

  190. # Success: PathLen of 0
    191. 

  191. ## server-0-ca.pem: signed by ca-cert.pem
    192. 

  192. ## server-0-cert.pem: signed by server-0-ca.pem 
    193. 

  193. cat server-0-cert.pem server-0-ca.pem > server-0-chain.pem
    194. 

  194. 

  195. # Success: PathLen of 1
    196. 

  196. ## server-1-ca.pem: signed by ca-cert.pem
    197. 

  197. ## server-1-0-ca.pem: signed by server-1-ca.pem
    198. 

  198. ## server-1-0-cert.pem: signed by server-1-0-ca.pem
    199. 

  199. cat server-1-0-cert.pem server-1-0-ca.pem server-1-ca.pem > server-1-0-chain.pem
    200. 

  200. ## server-1-cert.pem: signed by server-1-ca.pem
    201. 

  201. cat server-1-cert.pem server-1-ca.pem > server-1-chain.pem
    202. 

  202. 

  203. # Success: PathLen of 127
    204. 

  204. ## server-127-ca.pem: signed by ca-cert.pem
    205. 

  205. ## server-127-cert.pem: signed by server-127-cert.pem
    206. 

  206. cat server-127-cert.pem server-127-ca.pem > server-127-chain.pem
    207. 

  207. 

  208. # Failure: PathLen of 128
    209. 

  209. ## server-128-ca.pem: signed by ca-cert.pem
    210. 

  210. ## server-128-cert.pem: signed by server-128-ca.pem
    211. 

  211. cat server-128-cert.pem server-128-ca.pem > server-128-chain.pem
    212. 

  212. 

  213. # Failure: PathLen of 0, signing PathLen of 1
    214. 

  214. ## server-0-1-ca.pem: signed by server-0-ca.pem
    215. 

  215. ## server-0-1-cert.pem: signed by server-0-1-ca.pem
    216. 

  216. cat server-0-1-cert.pem server-0-1-ca.pem server-0-ca.pem > server-0-1-chain.pem
    217.