experiments/clixon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test: adding correct x509 v3 CA cert

Browse source
This commit is contained in:
Olof hagsand 2024-05-31 08:48:00 +02:00
parent 8098fb031f
commit 80d03fb5b0
1 changed files with 3 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
test/lib.sh
View file

@ -1265,15 +1265,12 @@ emailAddress = olof@hagsand.se
[ req_attributes ] [ req_attributes ]
challengePassword = test challengePassword = test
[ x509v3_extensions ]
basicConstraints = critical,CA:true
EOF EOF
# Generate CA cert # Generate CA cert
# XXX v3 requires x509 version 1 openssl req -batch -new -x509 -extensions x509v3_extensions -days 1 -config $tmpdir/ca.cnf -keyout $cakey -out $cacert || err1 "Generate CA cert"
if [ $(openssl version|awk '{print $2}') = "3.3.0" ]; then
openssl req -batch -new -x509v1 -days 1 -config $tmpdir/ca.cnf -keyout $cakey -out $cacert || err1 "Generate CA cert"
else
openssl req -batch -new -x509 -days 1 -config $tmpdir/ca.cnf -keyout $cakey -out $cacert || err1 "Generate CA cert"
fi
rm -rf $tmpdir rm -rf $tmpdir
} }