Lines Matching +full:multi +full:- +full:config
4 # Use of this source code is governed by a BSD-style license that can be
12 # +---+ +-----+
14 # +---+ +-----+
16 # +--v v--+ |
17 # +---+ +---+
19 # +---+ +---+
21 # v v---+
22 # +-----+
24 # +-----+
27 # +---+
29 # +---+
34 # 1. A(B) -> B(C) -> C(D) -> D(D)
35 # 3. A(B) -> B(C) -> C(E) -> E(E)
36 # 4. A(B) -> B(F) -> F(E) -> E(E)
40 # which are both self-signed.
46 set -e
48 rm -rf out
54 openssl rand -hex -out "out/${i}-serial" 16
55 touch "out/${i}-index.txt"
61 openssl genrsa -out "out/${i}.key" 2048
64 echo "Generating the self-signed roots"
68 CA_COMMON_NAME="${i} Root CA - Multi-root" \
71 -config redundant-ca.cnf \
72 -new \
73 -key "out/${i}.key" \
74 -out "out/${i}.csr"
76 echo "Generating self-signed ${i}"
77 CA_COMMON_NAME="${i} Root CA - Multi-root" \
80 -config redundant-ca.cnf \
81 -batch \
82 -startdate 160102000000Z \
83 -enddate 260102000000Z \
84 -extensions ca_cert \
85 -extfile redundant-ca.cnf \
86 -selfsign \
87 -in "out/${i}.csr" \
88 -out "out/${i}.pem"
95 CA_COMMON_NAME="${i} CA - Multi-root" \
98 -config redundant-ca.cnf \
99 -new \
100 -key "out/${i}.key" \
101 -out "out/${i}.csr"
105 CA_COMMON_NAME="D CA - Multi-root" \
108 -config redundant-ca.cnf \
109 -batch \
110 -startdate 160103000000Z \
111 -enddate 260102000000Z \
112 -extensions ca_cert \
113 -extfile redundant-ca.cnf \
114 -in out/C.csr \
115 -out out/C.pem
118 CA_COMMON_NAME="C CA - Multi-root" \
121 -config redundant-ca.cnf \
122 -batch \
123 -startdate 160104000000Z \
124 -enddate 260102000000Z \
125 -extensions ca_cert \
126 -extfile redundant-ca.cnf \
127 -in out/B.csr \
128 -out out/B.pem
131 CA_COMMON_NAME="E CA - Multi-root" \
134 -config redundant-ca.cnf \
135 -batch \
136 -startdate 160105000000Z \
137 -enddate 260102000000Z \
138 -extensions ca_cert \
139 -extfile redundant-ca.cnf \
140 -in out/C.csr \
141 -out out/C2.pem
144 CA_COMMON_NAME="E CA - Multi-root" \
147 -config redundant-ca.cnf \
148 -batch \
149 -startdate 160102000000Z \
150 -enddate 260102000000Z \
151 -extensions ca_cert \
152 -extfile redundant-ca.cnf \
153 -in out/F.csr \
154 -out out/F.pem
156 # Note: The startdate for B-by-F MUST be different than that of B-by-C; to make
157 # B-by-F more preferable, the startdate is chosen to be GREATER (later) than
158 # B-by-C.
160 CA_COMMON_NAME="F CA - Multi-root" \
163 -config redundant-ca.cnf \
164 -batch \
165 -startdate 160105000000Z \
166 -enddate 260102000000Z \
167 -extensions ca_cert \
168 -extfile redundant-ca.cnf \
169 -in out/B.csr \
170 -out out/B2.pem
177 -config ee.cnf \
178 -new \
179 -key "out/${i}.key" \
180 -out "out/${i}.csr"
184 CA_COMMON_NAME="B CA - Multi-root" \
187 -config redundant-ca.cnf \
188 -batch \
189 -days 3650 \
190 -extensions user_cert \
191 -extfile redundant-ca.cnf \
192 -in out/A.csr \
193 -out out/A.pem
196 /bin/sh -c "cat out/A.key out/A.pem > ../certificates/multi-root-A-by-B.pem"
197 /bin/sh -c "cat out/A.pem out/B.pem out/C.pem out/D.pem \
198 > ../certificates/multi-root-chain1.pem"
199 /bin/sh -c "cat out/A.pem out/B.pem out/C2.pem out/E.pem \
200 > ../certificates/multi-root-chain2.pem"
201 cp out/B.pem ../certificates/multi-root-B-by-C.pem
202 cp out/B2.pem ../certificates/multi-root-B-by-F.pem
203 cp out/C.pem ../certificates/multi-root-C-by-D.pem
204 cp out/C2.pem ../certificates/multi-root-C-by-E.pem
205 cp out/F.pem ../certificates/multi-root-F-by-E.pem
206 cp out/D.pem ../certificates/multi-root-D-by-D.pem
207 cp out/E.pem ../certificates/multi-root-E-by-E.pem
211 python crlsetutil.py -o ../certificates/multi-root-crlset-D-and-E.raw \
222 python crlsetutil.py -o ../certificates/multi-root-crlset-E.raw \
231 # Block C-by-D and F-by-E by way of serial number.
232 python crlsetutil.py -o ../certificates/multi-root-crlset-CD-and-FE.raw \
243 python crlsetutil.py -o ../certificates/multi-root-crlset-C.raw \
251 python crlsetutil.py -o ../certificates/multi-root-crlset-unrelated.raw \