| Index: net/data/ssl/scripts/generate-multi-root-test-chains.sh
|
| diff --git a/net/data/ssl/scripts/generate-multi-root-test-chains.sh b/net/data/ssl/scripts/generate-multi-root-test-chains.sh
|
| deleted file mode 100755
|
| index 6f88325a3ccf38debf443645a09a622b1d7b16cb..0000000000000000000000000000000000000000
|
| --- a/net/data/ssl/scripts/generate-multi-root-test-chains.sh
|
| +++ /dev/null
|
| @@ -1,161 +0,0 @@
|
| -#!/bin/sh
|
| -
|
| -# Copyright 2014 The Chromium Authors. All rights reserved.
|
| -# Use of this source code is governed by a BSD-style license that can be
|
| -# found in the LICENSE file.
|
| -
|
| -# This script generates two chains of test certificates:
|
| -#
|
| -# 1. A (end-entity) -> B -> C -> D (self-signed root)
|
| -# 2. A (end-entity) -> B -> C2 -> E (self-signed root)
|
| -#
|
| -# C and C2 have the same subject and keypair.
|
| -#
|
| -# We use these cert chains in CertVerifyProcChromeOSTest
|
| -# to ensure that multiple verification paths are properly handled.
|
| -
|
| -try () {
|
| - echo "$@"
|
| - "$@" || exit 1
|
| -}
|
| -
|
| -try rm -rf out
|
| -try mkdir out
|
| -
|
| -echo Create the serial number files.
|
| -serial=1000
|
| -for i in B C C2 D E
|
| -do
|
| - try /bin/sh -c "echo $serial > out/$i-serial"
|
| - serial=$(expr $serial + 1)
|
| -done
|
| -
|
| -echo Generate the keys.
|
| -try openssl genrsa -out out/A.key 2048
|
| -try openssl genrsa -out out/B.key 2048
|
| -try openssl genrsa -out out/C.key 2048
|
| -try openssl genrsa -out out/D.key 2048
|
| -try openssl genrsa -out out/E.key 2048
|
| -
|
| -echo Generate the D CSR.
|
| -CA_COMMON_NAME="D Root CA" \
|
| - CERTIFICATE=D \
|
| - try openssl req \
|
| - -new \
|
| - -key out/D.key \
|
| - -out out/D.csr \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo D signs itself.
|
| -CA_COMMON_NAME="D Root CA" \
|
| - try openssl x509 \
|
| - -req -days 3650 \
|
| - -in out/D.csr \
|
| - -extensions ca_cert \
|
| - -extfile redundant-ca.cnf \
|
| - -signkey out/D.key \
|
| - -out out/D.pem \
|
| - -text
|
| -
|
| -echo Generate the E CSR.
|
| -CA_COMMON_NAME="E Root CA" \
|
| - CERTIFICATE=E \
|
| - try openssl req \
|
| - -new \
|
| - -key out/E.key \
|
| - -out out/E.csr \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo E signs itself.
|
| -CA_COMMON_NAME="E Root CA" \
|
| - try openssl x509 \
|
| - -req -days 3650 \
|
| - -in out/E.csr \
|
| - -extensions ca_cert \
|
| - -extfile redundant-ca.cnf \
|
| - -signkey out/E.key \
|
| - -out out/E.pem \
|
| - -text
|
| -
|
| -echo Generate the C2 intermediary CSR.
|
| -CA_COMMON_NAME="C CA" \
|
| - CERTIFICATE=C2 \
|
| - try openssl req \
|
| - -new \
|
| - -key out/C.key \
|
| - -out out/C2.csr \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo Generate the B and C intermediaries\' CSRs.
|
| -for i in B C
|
| -do
|
| - CA_COMMON_NAME="$i CA" \
|
| - CERTIFICATE="$i" \
|
| - try openssl req \
|
| - -new \
|
| - -key "out/$i.key" \
|
| - -out "out/$i.csr" \
|
| - -config redundant-ca.cnf
|
| -done
|
| -
|
| -echo D signs the C intermediate.
|
| -# Make sure the signer's DB file exists.
|
| -touch out/D-index.txt
|
| -CA_COMMON_NAME="D Root CA" \
|
| - CERTIFICATE=D \
|
| - try openssl ca \
|
| - -batch \
|
| - -extensions ca_cert \
|
| - -in out/C.csr \
|
| - -out out/C.pem \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo E signs the C2 intermediate.
|
| -# Make sure the signer's DB file exists.
|
| -touch out/E-index.txt
|
| -CA_COMMON_NAME="E Root CA" \
|
| - CERTIFICATE=E \
|
| - try openssl ca \
|
| - -batch \
|
| - -extensions ca_cert \
|
| - -in out/C2.csr \
|
| - -out out/C2.pem \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo C signs the B intermediate.
|
| -touch out/C-index.txt
|
| -CA_COMMON_NAME="C CA" \
|
| - CERTIFICATE=C \
|
| - try openssl ca \
|
| - -batch \
|
| - -extensions ca_cert \
|
| - -in out/B.csr \
|
| - -out out/B.pem \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo Generate the A end-entity CSR.
|
| -try openssl req \
|
| - -new \
|
| - -key out/A.key \
|
| - -out out/A.csr \
|
| - -config ee.cnf
|
| -
|
| -echo B signs A.
|
| -touch out/B-index.txt
|
| -CA_COMMON_NAME="B CA" \
|
| - CERTIFICATE=B \
|
| - try openssl ca \
|
| - -batch \
|
| - -extensions user_cert \
|
| - -in out/A.csr \
|
| - -out out/A.pem \
|
| - -config redundant-ca.cnf
|
| -
|
| -echo Create multi-root-chain1.pem
|
| -try /bin/sh -c "cat out/A.key out/A.pem out/B.pem out/C.pem out/D.pem \
|
| - > ../certificates/multi-root-chain1.pem"
|
| -
|
| -echo Create multi-root-chain2.pem
|
| -try /bin/sh -c "cat out/A.key out/A.pem out/B.pem out/C2.pem out/E.pem \
|
| - > ../certificates/multi-root-chain2.pem"
|
| -
|
|
|