From: Dr. David von Oheimb <David.von.Oheimb@siemens.com>
Date: Thu, 3 Dec 2020 14:26:48 +0000 (+0100)
Subject: test/certs/setup.sh: Fix two glitches
X-Git-Tag: openssl-3.0.0-alpha10~168
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d7cdb8b60650e29c1f3c3990f3f86b51fde1c308;p=thirdparty%2Fopenssl.git

test/certs/setup.sh: Fix two glitches

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13606)
---

diff --git a/test/certs/setup.sh b/test/certs/setup.sh
index d7cdf06e7f3..9aa910dcc25 100755
--- a/test/certs/setup.sh
+++ b/test/certs/setup.sh
@@ -1,4 +1,4 @@
-#! /bin/sh
+#! /bin/bash
 
 # Primary root: root-cert
 # root cert variants: CA:false, key2, DN2
@@ -169,7 +169,7 @@ openssl x509 -in sca-cert.pem -trustout \
 ./mkcert.sh genee server.example ee-key ee-name2 ca-key ca-name2
 ./mkcert.sh genee -p clientAuth server.example ee-key ee-client ca-key ca-cert
 ./mkcert.sh genee server.example ee-key ee-pathlen ca-key ca-cert \
-    -extfile <(echo "basicConstraints=CA:FALSE,pathlen:0")
+    -extfile <(echo "basicConstraints=CA:FALSE,pathlen:0") # bash needed here
 #
 openssl x509 -in ee-cert.pem -trustout \
     -addtrust serverAuth -out ee+serverAuth.pem
@@ -211,7 +211,7 @@ OPENSSL_KEYBITS=8192 \
 ./mkcert.sh genee server.example ee-key-8192 ee-cert-8192 ca-key ca-cert
 
 # self-signed end-entity cert with explicit keyUsage not including KeyCertSign
-openssl req -new -x509 -key ee-key.pem -subj /CN=ee-self-signed -out ee-self-signed.pem -addext keyUsage=digitalSignature -days 36500
+openssl req -new -x509 -key ee-key.pem -subj /CN=ee-self-signed -out ee-self-signed.pem -addext keyUsage=digitalSignature -days 36525
 
 # Proxy certificates, off of ee-client
 # Start with some good ones