You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
99 lines
2.4 KiB
99 lines
2.4 KiB
4 years ago
|
@echo off
|
||
|
|
|
||
|
|
rem set ssleay=..\out\ssleay
|
||
|
|
set ssleay=%1
|
||
|
|
|
||
|
|
set reqcmd=%ssleay% req
|
||
|
|
set x509cmd=%ssleay% x509 -sha1
|
||
|
|
set verifycmd=%ssleay% verify
|
||
|
|
|
||
|
|
set CAkey=keyCA.ss
|
||
|
|
set CAcert=certCA.ss
|
||
|
|
set CAserial=certCA.srl
|
||
|
|
set CAreq=reqCA.ss
|
||
|
|
set CAconf=..\test\CAss.cnf
|
||
|
|
set CAreq2=req2CA.ss
|
||
|
|
|
||
|
|
set Uconf=..\test\Uss.cnf
|
||
|
|
set Ukey=keyU.ss
|
||
|
|
set Ureq=reqU.ss
|
||
|
|
set Ucert=certU.ss
|
||
|
|
|
||
|
|
echo make a certificate request using 'req'
|
||
|
|
%reqcmd% -config %CAconf% -out %CAreq% -keyout %CAkey% -new
|
||
|
|
if errorlevel 1 goto e_req
|
||
|
|
|
||
|
|
echo convert the certificate request into a self signed certificate using 'x509'
|
||
|
|
%x509cmd% -CAcreateserial -in %CAreq% -days 30 -req -out %CAcert% -signkey %CAkey% >err.ss
|
||
|
|
if errorlevel 1 goto e_x509
|
||
|
|
|
||
|
|
echo --
|
||
|
|
echo convert a certificate into a certificate request using 'x509'
|
||
|
|
%x509cmd% -in %CAcert% -x509toreq -signkey %CAkey% -out %CAreq2% >err.ss
|
||
|
|
if errorlevel 1 goto e_x509_2
|
||
|
|
|
||
|
|
%reqcmd% -verify -in %CAreq% -noout
|
||
|
|
if errorlevel 1 goto e_vrfy_1
|
||
|
|
|
||
|
|
%reqcmd% -verify -in %CAreq2% -noout
|
||
|
|
if errorlevel 1 goto e_vrfy_2
|
||
|
|
|
||
|
|
%verifycmd% -CAfile %CAcert% %CAcert%
|
||
|
|
if errorlevel 1 goto e_vrfy_3
|
||
|
|
|
||
|
|
echo --
|
||
|
|
echo make another certificate request using 'req'
|
||
|
|
%reqcmd% -config %Uconf% -out %Ureq% -keyout %Ukey% -new >err.ss
|
||
|
|
if errorlevel 1 goto e_req_gen
|
||
|
|
|
||
|
|
echo --
|
||
|
|
echo sign certificate request with the just created CA via 'x509'
|
||
|
|
%x509cmd% -CAcreateserial -in %Ureq% -days 30 -req -out %Ucert% -CA %CAcert% -CAkey %CAkey% -CAserial %CAserial%
|
||
|
|
if errorlevel 1 goto e_x_sign
|
||
|
|
|
||
|
|
%verifycmd% -CAfile %CAcert% %Ucert%
|
||
|
|
echo --
|
||
|
|
echo Certificate details
|
||
|
|
%x509cmd% -subject -issuer -startdate -enddate -noout -in %Ucert%
|
||
|
|
|
||
|
|
echo Everything appeared to work
|
||
|
|
echo --
|
||
|
|
echo The generated CA certificate is %CAcert%
|
||
|
|
echo The generated CA private key is %CAkey%
|
||
|
|
echo The current CA signing serial number is in %CAserial%
|
||
|
|
|
||
|
|
echo The generated user certificate is %Ucert%
|
||
|
|
echo The generated user private key is %Ukey%
|
||
|
|
echo --
|
||
|
|
|
||
|
|
del err.ss
|
||
|
|
|
||
|
|
goto end
|
||
|
|
|
||
|
|
:e_req
|
||
|
|
echo error using 'req' to generate a certificate request
|
||
|
|
goto end
|
||
|
|
:e_x509
|
||
|
|
echo error using 'x509' to self sign a certificate request
|
||
|
|
goto end
|
||
|
|
:e_x509_2
|
||
|
|
echo error using 'x509' convert a certificate to a certificate request
|
||
|
|
goto end
|
||
|
|
:e_vrfy_1
|
||
|
|
echo first generated request is invalid
|
||
|
|
goto end
|
||
|
|
:e_vrfy_2
|
||
|
|
echo second generated request is invalid
|
||
|
|
goto end
|
||
|
|
:e_vrfy_3
|
||
|
|
echo first generated cert is invalid
|
||
|
|
goto end
|
||
|
|
:e_req_gen
|
||
|
|
echo error using 'req' to generate a certificate request
|
||
|
|
goto end
|
||
|
|
:e_x_sign
|
||
|
|
echo error using 'x509' to sign a certificate request
|
||
|
|
goto end
|
||
|
|
|
||
|
|
:end
|