From 5e03c718f4e7ff13cb6834eda737c269ebed02ad Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 19:04:52 +0200 Subject: Adding upstream version 1.21.3. Signed-off-by: Daniel Baumann --- tests/certs/create-certs.sh | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100755 tests/certs/create-certs.sh (limited to 'tests/certs/create-certs.sh') diff --git a/tests/certs/create-certs.sh b/tests/certs/create-certs.sh new file mode 100755 index 0000000..8e5f409 --- /dev/null +++ b/tests/certs/create-certs.sh @@ -0,0 +1,28 @@ +#!/bin/sh + +#create key for CA self-signed certificate +certtool --generate-privkey --outfile test-ca-key.pem --rsa + +#create CA self-signed certificate +certtool --generate-self-signed --load-privkey test-ca-key.pem --template test-ca-template.txt --outfile test-ca-cert.pem + +# create server key +certtool --generate-privkey --outfile server-key.pem --rsa + +# create server certificate +certtool --generate-certificate --load-privkey server-key.pem --template server-template.txt --outfile server-cert.pem --load-ca-certificate test-ca-cert.pem --load-ca-privkey test-ca-key.pem + +# create expired server certificate +certtool --generate-certificate --load-privkey server-key.pem --template expired-template.txt --outfile expired.pem --load-ca-certificate test-ca-cert.pem --load-ca-privkey test-ca-key.pem + +# create not activated server cert +certtool --generate-certificate --load-privkey server-key.pem --template invalid-template.txt --outfile invalid.pem --load-ca-certificate test-ca-cert.pem --load-ca-privkey test-ca-key.pem + +# create client key +certtool --generate-privkey --outfile client-key.pem --rsa + +# create client certificate +certtool --generate-certificate --load-privkey client-key.pem --template client-template.txt --outfile client-cert.pem --load-ca-certificate test-ca-cert.pem --load-ca-privkey test-ca-key.pem + +# create CRL for the server certificate +certtool --generate-crl --load-ca-privkey test-ca-key.pem --load-ca-certificate test-ca-cert.pem --load-certificate server-cert.pem --outfile revoked-crl.pem --template revoked-template.txt -- cgit v1.2.3