]> git.ipfire.org Git - thirdparty/openssl.git/blame - ms/testssce.bat
x86_64 assembler pack: add support for Win64 SEH.
[thirdparty/openssl.git] / ms / testssce.bat
CommitLineData
0bf23d9b
RL
1rem set ssleay=..\out\ssleay\r
2set ssleay=%1\r
3\r
4set reqcmd=%ssleay% req\r
5set x509cmd=%ssleay% x509\r
6set verifycmd=%ssleay% verify\r
7\r
8set CAkey=\OpenSSL\keyCA.ss\r
9set CAcert=\OpenSSL\certCA.ss\r
10set CAserial=\OpenSSL\certCA.srl\r
11set CAreq=\OpenSSL\reqCA.ss\r
12cecopy ..\test\CAss.cnf CE:\OpenSSL\r
13set CAconf=\OpenSSL\CAss.cnf\r
14set CAreq2=\OpenSSL\req2CA.ss \r
15\r
16cecopy ..\test\Uss.cnf CE:\OpenSSL\r
17set Uconf=\OpenSSL\Uss.cnf\r
18set Ukey=\OpenSSL\keyU.ss\r
19set Ureq=\OpenSSL\reqU.ss\r
20set Ucert=\OpenSSL\certU.ss\r
21\r
22echo make a certificate request using 'req'\r
23cerun CE:\OpenSSL\%reqcmd% -config %CAconf% -out %CAreq% -keyout %CAkey% -new\r
24if errorlevel 1 goto e_req\r
25\r
26echo convert the certificate request into a self signed certificate using 'x509'\r
27cerun CE:\OpenSSL\%x509cmd% -CAcreateserial -in %CAreq% -days 30 -req -out %CAcert% -signkey %CAkey% "> \OpenSSL\err.ss"\r
28if errorlevel 1 goto e_x509\r
29\r
30echo --\r
31echo convert a certificate into a certificate request using 'x509'\r
32cerun CE:\OpenSSL\%x509cmd% -in %CAcert% -x509toreq -signkey %CAkey% -out %CAreq2% "> \OpenSSL\err.ss"\r
33if errorlevel 1 goto e_x509_2\r
34\r
35cerun CE:\OpenSSL\%reqcmd% -verify -in %CAreq% -noout\r
36if errorlevel 1 goto e_vrfy_1\r
37\r
38cerun CE:\OpenSSL\%reqcmd% -verify -in %CAreq2% -noout\r
39if errorlevel 1 goto e_vrfy_2\r
40\r
41cerun CE:\OpenSSL\%verifycmd% -CAfile %CAcert% %CAcert%\r
42if errorlevel 1 goto e_vrfy_3\r
43\r
44echo --\r
45echo make another certificate request using 'req'\r
46cerun CE:\OpenSSL\%reqcmd% -config %Uconf% -out %Ureq% -keyout %Ukey% -new "> \OpenSSL\err.ss"\r
47if errorlevel 1 goto e_req_gen\r
48\r
49echo --\r
50echo sign certificate request with the just created CA via 'x509'\r
51cerun CE:\OpenSSL\%x509cmd% -CAcreateserial -in %Ureq% -days 30 -req -out %Ucert% -CA %CAcert% -CAkey %CAkey% -CAserial %CAserial%\r
52if errorlevel 1 goto e_x_sign\r
53\r
54cerun CE:\OpenSSL\%verifycmd% -CAfile %CAcert% %Ucert%\r
55echo --\r
56echo Certificate details\r
57cerun CE:\OpenSSL\%x509cmd% -subject -issuer -startdate -enddate -noout -in %Ucert%\r
58\r
59cecopy CE:%CAcert% .\r
60cecopy CE:%CAkey% .\r
61cecopy CE:%CAserial% .\r
62cecopy CE:%Ucert% .\r
63cecopy CE:%Ukey% .\r
64\r
65echo Everything appeared to work\r
66echo --\r
67echo The generated CA certificate is %CAcert%\r
68echo The generated CA private key is %CAkey%\r
69echo The current CA signing serial number is in %CAserial%\r
70\r
71echo The generated user certificate is %Ucert%\r
72echo The generated user private key is %Ukey%\r
73echo --\r
74\r
75cedel CE:\OpenSSL\err.ss\r
76\r
77goto end\r
78\r
79:e_req\r
80echo error using 'req' to generate a certificate request\r
81goto end\r
82:e_x509\r
83echo error using 'x509' to self sign a certificate request\r
84goto end\r
85:e_x509_2\r
86echo error using 'x509' convert a certificate to a certificate request\r
87goto end\r
88:e_vrfy_1\r
89echo first generated request is invalid\r
90goto end\r
91:e_vrfy_2\r
92echo second generated request is invalid\r
93goto end\r
94:e_vrfy_3\r
95echo first generated cert is invalid\r
96goto end\r
97:e_req_gen\r
98echo error using 'req' to generate a certificate request\r
99goto end\r
100:e_x_sign\r
101echo error using 'x509' to sign a certificate request\r
102goto end\r
103\r
104:end\r