From a148a9b4f49b0c456d45a39c0d63a52405aa5ea9 Mon Sep 17 00:00:00 2001 From: "Dr. David von Oheimb" Date: Fri, 8 Jul 2022 21:49:28 +0200 Subject: test/certs/setup.sh: add missing comment on CA cert variant without basic constraints Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: David von Oheimb (Merged from https://github.com/openssl/openssl/pull/18758) --- test/certs/setup.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'test/certs') diff --git a/test/certs/setup.sh b/test/certs/setup.sh index 2f4becbab7..64cff0293b 100755 --- a/test/certs/setup.sh +++ b/test/certs/setup.sh @@ -10,7 +10,7 @@ DAYS=-1 ./mkcert.sh genroot "Root CA" root-key root-expired # cross root and root cross cert ./mkcert.sh genroot "Cross Root" cross-key cross-root ./mkcert.sh genca "Root CA" root-key root-cross-cert cross-key cross-root -# trust variants: +serverAuth -serverAuth +clientAuth -clientAuth, +# trust variants: +serverAuth -serverAuth +clientAuth -clientAuth openssl x509 -in root-cert.pem -trustout \ -addtrust serverAuth -out root+serverAuth.pem openssl x509 -in root-cert.pem -trustout \ @@ -79,7 +79,7 @@ openssl x509 -in sroot-cert.pem -trustout \ # Primary intermediate ca: ca-cert ./mkcert.sh genca "CA" ca-key ca-cert root-key root-cert -# ca variants: CA:false, key2, DN2, issuer2, expired +# ca variants: CA:false, no bc, key2, DN2, issuer2, expired ./mkcert.sh genee "CA" ca-key ca-nonca root-key root-cert ./mkcert.sh gen_nonbc_ca "CA" ca-key ca-nonbc root-key root-cert ./mkcert.sh genca "CA" ca-key2 ca-cert2 root-key root-cert -- cgit v1.2.3