summaryrefslogtreecommitdiffstats
path: root/test/certs
diff options
context:
space:
mode:
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>2020-12-03 15:26:48 +0100
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>2020-12-04 16:24:28 +0100
commitd7cdb8b60650e29c1f3c3990f3f86b51fde1c308 (patch)
tree737c677d6d545c1b65b9291c14fb47d59e378480 /test/certs
parente99505b4d0b9400c83dddf4d4eed3144e45b38c4 (diff)
test/certs/setup.sh: Fix two glitches
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/13606)
Diffstat (limited to 'test/certs')
-rwxr-xr-xtest/certs/setup.sh6
1 files changed, 3 insertions, 3 deletions
diff --git a/test/certs/setup.sh b/test/certs/setup.sh
index d7cdf06e7f..9aa910dcc2 100755
--- a/test/certs/setup.sh
+++ b/test/certs/setup.sh
@@ -1,4 +1,4 @@
-#! /bin/sh
+#! /bin/bash
# Primary root: root-cert
# root cert variants: CA:false, key2, DN2
@@ -169,7 +169,7 @@ openssl x509 -in sca-cert.pem -trustout \
./mkcert.sh genee server.example ee-key ee-name2 ca-key ca-name2
./mkcert.sh genee -p clientAuth server.example ee-key ee-client ca-key ca-cert
./mkcert.sh genee server.example ee-key ee-pathlen ca-key ca-cert \
- -extfile <(echo "basicConstraints=CA:FALSE,pathlen:0")
+ -extfile <(echo "basicConstraints=CA:FALSE,pathlen:0") # bash needed here
#
openssl x509 -in ee-cert.pem -trustout \
-addtrust serverAuth -out ee+serverAuth.pem
@@ -211,7 +211,7 @@ OPENSSL_KEYBITS=8192 \
./mkcert.sh genee server.example ee-key-8192 ee-cert-8192 ca-key ca-cert
# self-signed end-entity cert with explicit keyUsage not including KeyCertSign
-openssl req -new -x509 -key ee-key.pem -subj /CN=ee-self-signed -out ee-self-signed.pem -addext keyUsage=digitalSignature -days 36500
+openssl req -new -x509 -key ee-key.pem -subj /CN=ee-self-signed -out ee-self-signed.pem -addext keyUsage=digitalSignature -days 36525
# Proxy certificates, off of ee-client
# Start with some good ones