1 #!/bin/sh 2 3 # Copyright 2013 The Chromium Authors. All rights reserved. 4 # Use of this source code is governed by a BSD-style license that can be 5 # found in the LICENSE file. 6 7 # This script generates a set of test (end-entity, intermediate, root) 8 # certificates that can be used to test fetching of an intermediate via AIA. 9 10 try() { 11 echo "$@" 12 $@ || exit 1 13 } 14 15 try rm -rf out 16 try mkdir out 17 18 try echo 1 > out/2048-sha1-root-serial 19 touch out/2048-sha1-root-index.txt 20 21 # Generate the key 22 try openssl genrsa -out out/2048-sha1-root.key 2048 23 24 # Generate the root certificate 25 CA_COMMON_NAME="Test Root CA" \ 26 try openssl req \ 27 -new \ 28 -key out/2048-sha1-root.key \ 29 -out out/2048-sha1-root.req \ 30 -config ca.cnf 31 32 CA_COMMON_NAME="Test Root CA" \ 33 try openssl x509 \ 34 -req -days 3650 \ 35 -in out/2048-sha1-root.req \ 36 -out out/2048-sha1-root.pem \ 37 -text \ 38 -signkey out/2048-sha1-root.key \ 39 -extfile ca.cnf \ 40 -extensions ca_cert 41 42 # Generate the leaf certificate requests 43 try openssl req \ 44 -new \ 45 -keyout out/expired_cert.key \ 46 -out out/expired_cert.req \ 47 -config ee.cnf 48 49 try openssl req \ 50 -new \ 51 -keyout out/ok_cert.key \ 52 -out out/ok_cert.req \ 53 -config ee.cnf 54 55 # Generate the leaf certificates 56 CA_COMMON_NAME="Test Root CA" \ 57 try openssl ca \ 58 -batch \ 59 -extensions user_cert \ 60 -startdate 060101000000Z \ 61 -enddate 070101000000Z \ 62 -in out/expired_cert.req \ 63 -out out/expired_cert.pem \ 64 -config ca.cnf 65 66 CA_COMMON_NAME="Test Root CA" \ 67 try openssl ca \ 68 -batch \ 69 -extensions user_cert \ 70 -days 3650 \ 71 -in out/ok_cert.req \ 72 -out out/ok_cert.pem \ 73 -config ca.cnf 74 75 cat out/ok_cert.key out/ok_cert.pem \ 76 > ../certificates/ok_cert.pem 77 cat out/expired_cert.key out/expired_cert.pem \ 78 > ../certificates/expired_cert.pem 79 cat out/2048-sha1-root.key out/2048-sha1-root.pem \ 80 > ../certificates/root_ca_cert.pem 81 82
