Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2025-12-24 08:16:33 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Added support for wildcard certificates

Browse source 
- Added support for multi-domain certificates through the X509 Subject Alternative Name extension
This commit is contained in:
Paul Bakker 2012-02-11 16:09:32 +00:00
parent fab5c829e7
commit a8cd239d6b
18 changed files with 1005 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

20
programs/ssl/test-ca/gen_test_ca.sh
View file

@ -58,6 +58,20 @@ openssl req -config sslconf_use.txt -new -key cert_digest.key -out cert_sha384.r
cat sslconf.txt > sslconf_use.txt;echo "CN=PolarSSL Cert SHA512" >> sslconf_use.txt
openssl req -config sslconf_use.txt -new -key cert_digest.key -out cert_sha512.req -sha512
cat sslconf.txt > sslconf_use.txt;echo "CN=*.example.com" >> sslconf_use.txt
openssl req -config sslconf_use.txt -new -key cert_digest.key -out cert_example_wildcard.req
cat sslconf.txt > sslconf_use.txt;echo "CN=example.com" >> sslconf_use.txt
openssl req -config sslconf_use.txt -new -key cert_digest.key -out cert_example.req
cat sslconf.txt > sslconf_use.txt;echo "CN=www.example.com" >> sslconf_use.txt
openssl req -config sslconf_use.txt -new -key cert_digest.key -out cert_example_www.req
cat sslconf.txt > sslconf_use.txt;echo "CN=www.example.com" >> sslconf_use.txt
echo "[ v3_req ]" >> sslconf_use.txt
echo "subjectAltName = \"DNS:www.example.com,DNS:example.com,DNS:example.net\"" >> sslconf_use.txt
openssl req -config sslconf_use.txt -new -key cert_digest.key -out cert_example_multi.req -reqexts "v3_req"
echo "Signing requests"
for i in server1 server2 client1 client2;
do
@ -71,6 +85,12 @@ do
-batch -in cert_$i.req -md $i
done
for i in example_wildcard example example_www example_multi;
do
openssl ca -config sslconf.txt -out cert_$i.crt -passin pass:$PASSWORD \
-batch -in cert_$i.req
done
echo "Revoking firsts"
openssl ca -batch -config sslconf.txt -revoke server1.crt -passin pass:$PASSWORD
openssl ca -batch -config sslconf.txt -revoke client1.crt -passin pass:$PASSWORD