2011-06-02 02:36:49 +08:00
|
|
|
There is often a need to generate test certificates automatically using
|
|
|
|
|
a script. This is often a cause for confusion which can result in incorrect
|
|
|
|
|
CA certificates, obsolete V1 certificates or duplicate serial numbers.
|
|
|
|
|
The range of command line options can be daunting for a beginner.
|
|
|
|
|
|
2012-09-10 04:47:36 +08:00
|
|
|
The mkcerts.sh script is an example of how to generate certificates
|
|
|
|
|
automatically using scripts. Example creates a root CA, an intermediate CA
|
|
|
|
|
signed by the root and several certificates signed by the intermediate CA.
|
|
|
|
|
|
|
|
|
|
The script then creates an empty index.txt file and adds entries for the
|
|
|
|
|
certificates and generates a CRL. Then one certificate is revoked and a
|
|
|
|
|
second CRL generated.
|
|
|
|
|
|
|
|
|
|
The script ocsprun.sh runs the test responder on port 8888 covering the
|
|
|
|
|
client certificates.
|
|
|
|
|
|
|
|
|
|
The script ocspquery.sh queries the status of the certificates using the
|
|
|
|
|
test responder.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
