From: Dr. David von Oheimb Date: Fri, 8 Jul 2022 19:49:28 +0000 (+0200) Subject: test/certs/setup.sh: add missing comment on CA cert variant without basic constraints X-Git-Tag: openssl-3.2.0-alpha1~2406 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a148a9b4f49b0c456d45a39c0d63a52405aa5ea9;p=thirdparty%2Fopenssl.git test/certs/setup.sh: add missing comment on CA cert variant without basic constraints Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: David von Oheimb (Merged from https://github.com/openssl/openssl/pull/18758) --- diff --git a/test/certs/setup.sh b/test/certs/setup.sh index 2f4becbab7b..64cff0293b1 100755 --- a/test/certs/setup.sh +++ b/test/certs/setup.sh @@ -10,7 +10,7 @@ DAYS=-1 ./mkcert.sh genroot "Root CA" root-key root-expired # cross root and root cross cert ./mkcert.sh genroot "Cross Root" cross-key cross-root ./mkcert.sh genca "Root CA" root-key root-cross-cert cross-key cross-root -# trust variants: +serverAuth -serverAuth +clientAuth -clientAuth, +# trust variants: +serverAuth -serverAuth +clientAuth -clientAuth openssl x509 -in root-cert.pem -trustout \ -addtrust serverAuth -out root+serverAuth.pem openssl x509 -in root-cert.pem -trustout \ @@ -79,7 +79,7 @@ openssl x509 -in sroot-cert.pem -trustout \ # Primary intermediate ca: ca-cert ./mkcert.sh genca "CA" ca-key ca-cert root-key root-cert -# ca variants: CA:false, key2, DN2, issuer2, expired +# ca variants: CA:false, no bc, key2, DN2, issuer2, expired ./mkcert.sh genee "CA" ca-key ca-nonca root-key root-cert ./mkcert.sh gen_nonbc_ca "CA" ca-key ca-nonbc root-key root-cert ./mkcert.sh genca "CA" ca-key2 ca-cert2 root-key root-cert