summaryrefslogtreecommitdiffstats
path: root/apps/CA.pl.in
diff options
context:
space:
mode:
authorRob Percival <robpercival@google.com>2016-03-10 19:15:13 +0000
committerRich Salz <rsalz@openssl.org>2017-02-22 10:40:30 -0500
commitb6486bf749bf6246dbae7643c5fb7717cf388072 (patch)
treeb35d838352b52ec5a9ef4223573ac768dd53b2e9 /apps/CA.pl.in
parent79020b27beff060d02830870fdfd821fe8cbd439 (diff)
Adds a "-precert" flag to "openssl req" for creating pre-certificates
This makes it a little easier to create a pre-certificate. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/843)
Diffstat (limited to 'apps/CA.pl.in')
-rw-r--r--apps/CA.pl.in4
1 files changed, 4 insertions, 0 deletions
diff --git a/apps/CA.pl.in b/apps/CA.pl.in
index 11566dfc21..940e7d60ab 100644
--- a/apps/CA.pl.in
+++ b/apps/CA.pl.in
@@ -123,6 +123,10 @@ if ($WHAT eq '-newcert' ) {
# create a certificate
$RET = run("$REQ -new -x509 -keyout $NEWKEY -out $NEWCERT $DAYS $EXTRA{req}");
print "Cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0;
+} elsif ($WHAT eq '-newprecert' ) {
+ # create a pre-certificate
+ $RET = run("$REQ -new -x509 -precert -keyout $NEWKEY -out $NEWCERT $DAYS");
+ print "Pre-cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0;
} elsif ($WHAT eq '-newreq' ) {
# create a certificate request
$RET = run("$REQ -new -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}");