mirror of
https://github.com/gocsaf/csaf.git
synced 2025-12-22 05:40:11 +01:00
e8166121c7
* Make files more readable: Move ";" from variable and add it into the nginx config file. * Add missing nginx option `disable_symlinks off;` to the tlp paths.
57 lines
1.9 KiB
Bash
57 lines
1.9 KiB
Bash
# This file is Free Software under the MIT License
|
|
# without warranty, see README.md and LICENSES/MIT.txt for details.
|
|
#
|
|
# SPDX-License-Identifier: MIT
|
|
#
|
|
# SPDX-FileCopyrightText: 2022 German Federal Office for Information Security (BSI) <https://www.bsi.bund.de>
|
|
# Software-Engineering: 2022 Intevation GmbH <https://intevation.de>
|
|
|
|
# This scripts creates two client certificates. It uses for signing the root certifcate
|
|
# created with `createRootCAForITest.sh` that must be run earlier.
|
|
|
|
set -e
|
|
|
|
mkdir -p ~/${FOLDERNAME}
|
|
cd ~/${FOLDERNAME}
|
|
|
|
certtool --generate-privkey --outfile testclient1-key.pem
|
|
|
|
echo '
|
|
organization = "'${ORGANAME}'"
|
|
country = DE
|
|
cn = "TLS Test Client 1"
|
|
|
|
tls_www_client
|
|
signing_key
|
|
encryption_key
|
|
|
|
serial = 020
|
|
expiration_days = 50
|
|
' > gnutls-certtool.testclient1.template
|
|
|
|
certtool --generate-certificate --load-privkey testclient1-key.pem --outfile testclient1.crt --load-ca-certificate rootca-cert.pem --load-ca-privkey rootca-key.pem --template gnutls-certtool.testclient1.template --stdout | head -1
|
|
|
|
certtool --load-ca-certificate rootca-cert.pem --load-certificate testclient1.crt --load-privkey testclient1-key.pem --to-p12 --p12-name "Test Client 1" --null-password --outder --outfile testclient1.p12
|
|
|
|
certtool --generate-privkey --outfile testclient2-key.pem
|
|
|
|
echo '
|
|
organization = "'${ORGANAME}'"
|
|
country = DE
|
|
cn = "TLS Test Client 2"
|
|
|
|
tls_www_client
|
|
signing_key
|
|
encryption_key
|
|
|
|
serial = 021
|
|
expiration_days = 1
|
|
' > gnutls-certtool.testclient2.template
|
|
|
|
certtool --generate-certificate --load-privkey testclient2-key.pem --outfile testclient2.crt --load-ca-certificate rootca-cert.pem --load-ca-privkey rootca-key.pem --template gnutls-certtool.testclient2.template --stdout | head -1
|
|
|
|
certtool --load-ca-certificate rootca-cert.pem --load-certificate testclient2.crt --load-privkey testclient2-key.pem --to-p12 --p12-name "Test Client 2" --null-password --outder --outfile testclient2.p12
|
|
|
|
SSL_CLIENT_CERTIFICATE=$(
|
|
echo "$PWD/rootca-cert.pem"
|
|
)
|