57 lines
1.6 KiB
Bash
57 lines
1.6 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
# Copyright 2020 Vladimir Panteleev
|
||
|
|
#
|
||
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
# you may not use this file except in compliance with the License.
|
||
|
|
# You may obtain a copy of the License at
|
||
|
|
#
|
||
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
#
|
||
|
|
# Unless required by applicable law or agreed to in writing, software
|
||
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
# See the License for the specific language governing permissions and
|
||
|
|
# limitations under the License.
|
||
|
|
|
||
|
|
set -eEuo pipefail
|
||
|
|
|
||
|
|
# Script to set up a minimal certificate authority for keygen.js testing.
|
||
|
|
# Not a secure configuration! Do not use in production!
|
||
|
|
|
||
|
|
rm -rf ca/ssl
|
||
|
|
mkdir -p ca/ssl
|
||
|
|
cd ca/ssl
|
||
|
|
|
||
|
|
mkdir 161sh
|
||
|
|
mkdir 161sh/private
|
||
|
|
openssl genpkey -algorithm RSA -out 161sh/private/cakey.pem
|
||
|
|
openssl req -x509 -days 358000 -new -nodes -key 161sh/private/cakey.pem -sha256 -out 161sh/cacert.pem \
|
||
|
|
-subj "/C=SH/CN=161.sh"
|
||
|
|
mkdir 161sh/newcerts
|
||
|
|
touch 161sh/index.txt
|
||
|
|
echo '0000000000000000' > 161sh/serial
|
||
|
|
mkdir tmp
|
||
|
|
|
||
|
|
cat > openssl.cnf <<'EOF'
|
||
|
|
[ ca ]
|
||
|
|
default_ca = CA_default
|
||
|
|
|
||
|
|
[ CA_default ]
|
||
|
|
dir = ./161sh
|
||
|
|
private_key = $dir/private/cakey.pem
|
||
|
|
certificate = $dir/cacert.pem
|
||
|
|
new_certs_dir = $dir/newcerts
|
||
|
|
database = $dir/index.txt
|
||
|
|
serial = $dir/serial
|
||
|
|
policy = policy_match
|
||
|
|
|
||
|
|
[ policy_match ]
|
||
|
|
countryName = match
|
||
|
|
stateOrProvinceName = optional
|
||
|
|
organizationName = supplied
|
||
|
|
organizationalUnitName = optional
|
||
|
|
commonName = supplied
|
||
|
|
emailAddress = optional
|
||
|
|
EOF
|