mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
036cbb6bbf
Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12109)
19 lines
856 B
Plaintext
19 lines
856 B
Plaintext
There is often a need to generate test certificates automatically using
|
|
a script. This is often a cause for confusion which can result in incorrect
|
|
CA certificates, obsolete V1 certificates or duplicate serial numbers.
|
|
The range of command line options can be daunting for a beginner.
|
|
|
|
The mkcerts.sh script is an example of how to generate certificates
|
|
automatically using scripts. Example creates a root CA, an intermediate CA
|
|
signed by the root and several certificates signed by the intermediate CA.
|
|
|
|
The script then creates an empty index.txt file and adds entries for the
|
|
certificates and generates a CRL. Then one certificate is revoked and a
|
|
second CRL generated.
|
|
|
|
The script ocsprun.sh runs the test responder on port 8888 covering the
|
|
client certificates.
|
|
|
|
The script ocspquery.sh queries the status of the certificates using the
|
|
test responder.
|