Merge branch '4.next'

[users/heiko/exim.git] / test / aux-fixed / exim-ca / README

diff --git a/test/aux-fixed/exim-ca/README b/test/aux-fixed/exim-ca/README
old mode 100644 (file)
new mode 100755 (executable)
index b8d2a41..98de5d4
--- a/test/aux-fixed/exim-ca/README
+++ b/test/aux-fixed/exim-ca/README
@@ -1,7 +1,9 @@
 
 The three directories each contain a complete CA with server signing
 certificate, OCSP signing certificate and a selection of server
 
 The three directories each contain a complete CA with server signing
 certificate, OCSP signing certificate and a selection of server

-certificates under each domain.
+certificates under each domain. The "server1" certificates have
+a CRL distribution point extension; the "server2" ones instead have
+a Authority Key extension/

 
 For each directory there are a number of subdirectories.
 
 
 For each directory there are a number of subdirectories.
 


@@ -35,7 +37,7 @@ The ocsp response files are those gotten that way. in .der format;
 is out-of-date, and "revoked" meaning the cert has been revoked.
 
 
 is out-of-date, and "revoked" meaning the cert has been revoked.
 
 

-The files were created using the genall script which utilises a
+The files were created using the "genall" script which utilises a

 combination of tools,
 
     openssl
 combination of tools,
 
     openssl


@@ -47,5 +49,9 @@ line CA tool which can be found at
 
     http://people.redhat.com/mpoole/clica/
 
 
     http://people.redhat.com/mpoole/clica/
 

+NOTE:
+ During running of "genall" you need to manipulate the system
+ date/time.  Shutdown ntpd service before doing this, and restart
+ after.