wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-31 11:17:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

if no extensions are present a v1 certificate was generated, add a SKID extension to avoid that

Browse Source
This commit is contained in:
JacobBarthelmeh
2024-12-18 16:11:18 -07:00
parent bf6ef15be4
commit 4ed14af331
1 changed files with 7 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
certs/test/gen-testcerts.sh
View File

@@ -36,9 +36,7 @@ build_test_cert_conf() {
echo "prompt = no" >> "$1".conf echo "prompt = no" >> "$1".conf
echo "default_bits = 2048" >> "$1".conf echo "default_bits = 2048" >> "$1".conf
echo "distinguished_name = req_distinguished_name" >> "$1".conf echo "distinguished_name = req_distinguished_name" >> "$1".conf
if [ -n "$3" ]; then echo "req_extensions = req_ext" >> "$1".conf
echo "req_extensions = req_ext" >> "$1".conf
fi
if [ -n "$4" ]; then if [ -n "$4" ]; then
echo "basicConstraints=CA:true,pathlen:0" >> "$1".conf echo "basicConstraints=CA:true,pathlen:0" >> "$1".conf
echo "" >> "$1".conf echo "" >> "$1".conf
@@ -52,8 +50,8 @@ build_test_cert_conf() {
echo "CN = $2" >> "$1".conf echo "CN = $2" >> "$1".conf
echo "emailAddress = info@wolfssl.com" >> "$1".conf echo "emailAddress = info@wolfssl.com" >> "$1".conf
echo "" >> "$1".conf echo "" >> "$1".conf
echo "[ req_ext ]" >> "$1".conf
if [ -n "$3" ]; then if [ -n "$3" ]; then
echo "[ req_ext ]" >> "$1".conf
case "$3" in case "$3" in
*DER*) *DER*)
echo "subjectAltName = $3" >> "$1".conf echo "subjectAltName = $3" >> "$1".conf
@@ -64,6 +62,8 @@ build_test_cert_conf() {
echo "DNS.1 = $3" >> "$1".conf echo "DNS.1 = $3" >> "$1".conf
;; ;;
esac esac
else
echo "subjectKeyIdentifier = hash" >> "$1".conf
fi fi
} }
@@ -85,15 +85,9 @@ generate_test_cert() {
check_result $? check_result $?
echo "step 4 create cert" echo "step 4 create cert"
if [ "$3" = "" ]; then openssl x509 -req -days 1000 -sha256 \
openssl x509 -req -days 1000 -sha256 \ -in "$1".csr -signkey ../server-key.pem \
-in "$1".csr -signkey ../server-key.pem \ -out "$1".pem -extensions req_ext -extfile "$1".conf
-out "$1".pem -extfile "$1".conf
else
openssl x509 -req -days 1000 -sha256 \
-in "$1".csr -signkey ../server-key.pem \
-out "$1".pem -extensions req_ext -extfile "$1".conf
fi
check_result $? check_result $?
rm "$1".conf rm "$1".conf
rm "$1".csr rm "$1".csr