aboutsummaryrefslogtreecommitdiff
path: root/genpki.sh
diff options
context:
space:
mode:
Diffstat (limited to 'genpki.sh')
-rwxr-xr-xgenpki.sh14
1 files changed, 8 insertions, 6 deletions
diff --git a/genpki.sh b/genpki.sh
index be10f6f..0ee6331 100755
--- a/genpki.sh
+++ b/genpki.sh
@@ -45,7 +45,8 @@ O = Deuxfleurs
CN = $APP
[v3_req]
-keyUsage = keyEncipherment, keyCertSign, dataEncipherment, serverAuth, clientAuth
+keyUsage = keyEncipherment, keyCertSign, dataEncipherment
+extendedKeyUsage = serverAuth, clientAuth
subjectAltName = @alt_names
[alt_names]
@@ -85,7 +86,8 @@ O = Deuxfleurs
CN = $APP-client
[v3_req]
-keyUsage = keyEncipherment, keyCertSign, dataEncipherment, clientAuth
+keyUsage = keyEncipherment, keyCertSign, dataEncipherment
+extendedKeyUsage = clientAuth
subjectAltName = @alt_names
[alt_names]
@@ -97,8 +99,8 @@ EOF
rm $CERT-client.csr
fi
- if [ ! -f $CERT-client.p12 ]; then
- openssl pkcs12 -export -out $CERT-client.p12 \
- -in $APP-ca.pem -in $CERT-client.crt -inkey $CERT-client.key
- fi
+ #if [ ! -f $CERT-client.p12 ]; then
+ # openssl pkcs12 -export -out $CERT-client.p12 \
+ # -in $APP-ca.pem -in $CERT-client.crt -inkey $CERT-client.key
+ #fi
done