read junk
for tld in com org net
do
- clica -D example.$tld -p password -B 512 -I -N example.$tld -F -C http://crl.example.$tld/latest.crl -O http://oscp/example.$tld/
+ clica -D example.$tld -p password -B 1024 -I -N example.$tld -F -C http://crl.example.$tld/latest.crl -O http://oscp/example.$tld/
clica -D example.$tld -p password -s 101 -S server1.example.$tld
clica -D example.$tld -p password -s 102 -S revoked1.example.$tld
clica -D example.$tld -p password -s 103 -S expired1.example.$tld -m 1
# and loop again to generate unlocked keys and client cert bundles
for tld in com org net
do
- for server in server1 revoked1 expired1 server2 revoked2 expired2 do
+ for server in server1 revoked1 expired1 server2 revoked2 expired2
+ do
SDIR=example.$tld/$server.example.$tld
SPFX=$SDIR/$server.example.$tld
openssl rsa -in $SPFX.key -passin file:$SDIR/pwdfile -out $SPFX.unlocked.key
openssl crl -in $CADIR/crl.v2 -inform der -out $CADIR/crl.v2.pem
done
+find example.* -type d -print0 | xargs -0 chmod 755
+find example.* -type f -print0 | xargs -0 chmod 644
+
echo "CA, Certificate, CRL and OSCP Response generation complete"