Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
emulab
emulab-devel
Commits
18c971ed
Commit
18c971ed
authored
Jun 06, 2002
by
Leigh B. Stoller
Browse files
Add capture.pem for Chad.
parent
62baf765
Changes
2
Hide whitespace changes
Inline
Side-by-side
ssl/GNUmakefile.in
View file @
18c971ed
...
...
@@ -54,6 +54,30 @@ server.pem: dirsmade server.cnf ca.cnf
cat server_key.pem server_cert.pem > server.pem
rm -f newreq.pem
capture.pem: dirsmade capture.cnf ca.cnf
#
# Create the server side private key and certificate request.
#
openssl req -new -config capture.cnf \
-keyout capture_key.pem -out capture_req.pem
#
# Combine key and cert request.
#
cat capture_key.pem capture_req.pem > newreq.pem
#
# Sign the capture cert request, creating a capture certificate.
#
openssl ca -batch -policy policy_match -config ca.cnf \
-out capture_cert.pem \
-cert cacert.pem -keyfile cakey.pem \
-infiles newreq.pem
#
# Combine the key and the certificate into one file which is installed
# on boss and used by capture.
#
cat capture_key.pem capture_cert.pem > capture.pem
rm -f newreq.pem
localnode.pem: dirsmade localnode.cnf ca.cnf $(SRCDIR)/mkclient.sh
$(SRCDIR)/mkclient.sh localnode
...
...
@@ -76,7 +100,8 @@ install:
@echo "BE VERY CAREFUL! INSTALLING NEW CERTS CAN CAUSE DISASTER!"
boss-install: $(INSTALL_ETCDIR)/emulab.pem \
$(INSTALL_ETCDIR)/server.pem
$(INSTALL_ETCDIR)/server.pem \
$(INSTALL_ETCDIR)/capture.pem
$(INSTALL_DATA) localnode.pem $(INSTALL_ETCDIR)/client.pem
client-install:
...
...
ssl/capture.cnf.in
0 → 100644
View file @
18c971ed
[ req ]
prompt = no
default_bits = 1024
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert
encrypt_key = no
string_mask = nombstr
[ req_distinguished_name ]
C = US
ST = Utah
L = Salt Lake City
O = Utah Network Testbed
OU = Capture Server
# capture uses CN for verification.
CN = @BOSSNODE@
emailAddress = @TBOPSEMAIL@
[ req_attributes ]
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:true
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment