mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
df4439186f
Trim trailing whitespace. It doesn't match OpenSSL coding standards, AFAICT, and it can cause problems with git tooling. Trailing whitespace remains in test data and external source. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/8092)
22 lines
859 B
Plaintext
22 lines
859 B
Plaintext
There is often a need to generate test certificates automatically using
|
|
a script. This is often a cause for confusion which can result in incorrect
|
|
CA certificates, obsolete V1 certificates or duplicate serial numbers.
|
|
The range of command line options can be daunting for a beginner.
|
|
|
|
The mkcerts.sh script is an example of how to generate certificates
|
|
automatically using scripts. Example creates a root CA, an intermediate CA
|
|
signed by the root and several certificates signed by the intermediate CA.
|
|
|
|
The script then creates an empty index.txt file and adds entries for the
|
|
certificates and generates a CRL. Then one certificate is revoked and a
|
|
second CRL generated.
|
|
|
|
The script ocsprun.sh runs the test responder on port 8888 covering the
|
|
client certificates.
|
|
|
|
The script ocspquery.sh queries the status of the certificates using the
|
|
test responder.
|
|
|
|
|
|
|