Create a new embeddedSCTs1 that's signed using SHA256

[thirdparty/openssl.git] / test / certs / setup.sh

diff --git a/test/certs/setup.sh b/test/certs/setup.sh
index 26b2f1ddfe02e7170fbe165365f6bc31e5bfdd8a..bd0b66394486457694e8b7df7be87ddedfdf72a2 100755 (executable)
--- a/test/certs/setup.sh
+++ b/test/certs/setup.sh
@@ -375,3 +375,6 @@ openssl req -new -nodes -subj "/CN=localhost" \
     -pkeyopt rsa_pss_keygen_md:sha256 -pkeyopt rsa_pss_keygen_saltlen:32 | \
     ./mkcert.sh geneenocsr "Server RSA-PSS restricted cert" \
     server-pss-restrict-cert rootkey rootcert
+
+# CT entry
+./mkcert.sh genct server.example embeddedSCTs1-key embeddedSCTs1 embeddedSCTs1_issuer-key embeddedSCTs1_issuer ct-server-key