blob: 2385e75becc09c8f16daac6df74656d6ee5ec7f7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
CATOP=./demoCA
ORIG_CONF=/usr/lib/ssl/openssl.cnf
ELEVEN_YEARS=-days 4015
init:
cp $(ORIG_CONF) ca.conf
install -d $(CATOP)
install -d $(CATOP)/certs
install -d $(CATOP)/crl
install -d $(CATOP)/newcerts
install -d $(CATOP)/private
touch $(CATOP)/index.txt
echo 01>$(CATOP)/crlnumber
@echo '**** Making CA certificate ...'
openssl req -nodes -new \
-newkey rsa -keyout $(CATOP)/private/cakey.pem \
-out $(CATOP)/careq.pem \
-multivalue-rdn \
-subj "/C=UK/ST=-/O=u1db LOCAL TESTING ONLY, DO NO TRUST/CN=u1db testing CA"
openssl ca -config ./ca.conf -create_serial \
-out $(CATOP)/cacert.pem $(ELEVEN_YEARS) -batch \
-keyfile $(CATOP)/private/cakey.pem -selfsign \
-extensions v3_ca -infiles $(CATOP)/careq.pem
pems:
cp ./demoCA/cacert.pem .
openssl req -new -config ca.conf \
-multivalue-rdn \
-subj "/O=u1db LOCAL TESTING ONLY, DO NOT TRUST/CN=localhost" \
-nodes -keyout testing.key -out newreq.pem $(ELEVEN_YEARS)
openssl ca -batch -config ./ca.conf $(ELEVEN_YEARS) \
-policy policy_anything \
-out testing.cert -infiles newreq.pem
.PHONY: init pems
|
