add test for degenerate case and allow degenerate case by default

certs/include.am

@@ -37,6 +37,7 @@ EXTRA_DIST += \
 	     certs/server-revoked-cert.pem \
 	     certs/server-revoked-key.pem \
 	     certs/wolfssl-website-ca.pem \
+	     certs/test-degenerate.p7b \
 	     certs/test-servercert.p12 \
 	     certs/ecc-rsa-server.p12 \
 	     certs/dsaparams.pem \

certs/renewcerts.sh

@@ -30,6 +30,9 @@
 #                       crl/crl.revoked
 #                       crl/eccCliCRL.pem
 #                       crl/eccSrvCRL.pem
+#
+#                       pkcs7:
+#                       test-degenerate.p7b
 # if HAVE_NTRU
 #                       ntru-cert.pem
 #                       ntru-key.raw
@@ -570,6 +573,19 @@ run_renewcerts(){
     echo "ran ./gencrls.sh"
     echo ""
 
+    ############################################################
+    ########## generate PKCS7 bundles ##########################
+    ############################################################
+    echo "Changing directory to wolfssl certs..."
+    echo ""
+    cd ../ || exit 1
+    echo "Creating test-degenerate.p7b..."
+    echo ""
+    openssl crl2pkcs7 -nocrl -certfile ./client-cert.pem -out test-degenerate.p7b -outform DER
+    check_result $? ""
+    echo "End of section"
+    echo "---------------------------------------------------------------------"
+
     #cleanup the file system now that we're done
     echo "Performing final steps, cleaning up the file system..."
     echo ""