A local copy of OpenSSL from GitHub
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Pauli 92c03668c0 Add config_diagnostics to our configuration files. 3 months ago
..
apps Add config_diagnostics to our configuration files. 3 months ago
README.txt Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txt 1 year ago
ca.cnf Add config_diagnostics to our configuration files. 3 months ago
mkcerts.sh Remove unnecessary trailing whitespace 3 years ago
ocspquery.sh Extend certificate creation examples to include CRL generation and sample 9 years ago
ocsprun.sh Extend certificate creation examples to include CRL generation and sample 9 years ago

README.txt

There is often a need to generate test certificates automatically using
a script. This is often a cause for confusion which can result in incorrect
CA certificates, obsolete V1 certificates or duplicate serial numbers.
The range of command line options can be daunting for a beginner.

The mkcerts.sh script is an example of how to generate certificates
automatically using scripts. Example creates a root CA, an intermediate CA
signed by the root and several certificates signed by the intermediate CA.

The script then creates an empty index.txt file and adds entries for the
certificates and generates a CRL. Then one certificate is revoked and a
second CRL generated.

The script ocsprun.sh runs the test responder on port 8888 covering the
client certificates.

The script ocspquery.sh queries the status of the certificates using the
test responder.