]> git.ipfire.org Git - thirdparty/krb5.git/commit
Make test PKINIT certs work with OpenSSL 3.0 1224/head
authorGreg Hudson <ghudson@mit.edu>
Fri, 8 Oct 2021 21:44:15 +0000 (17:44 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 18 Oct 2021 15:29:38 +0000 (11:29 -0400)
commitce4e370f1717972fef92ae6d749107ebd11b65bc
treeb64f2965b5137611203794005feeb57eeba568c5
parent7e8c41afc54db2ca75de5a1e2e440b034be8887b
Make test PKINIT certs work with OpenSSL 3.0

Add shell functions to reduce repetition in make-certs.sh.  Create
PKCS12 files with the -descert flag so that they can be read by
OpenSSL 3.0 without enabling the legacy provider.
16 files changed:
src/tests/pkinit-certs/ca.pem
src/tests/pkinit-certs/generic.p12
src/tests/pkinit-certs/generic.pem
src/tests/pkinit-certs/kdc.pem
src/tests/pkinit-certs/make-certs.sh
src/tests/pkinit-certs/privkey-enc.pem
src/tests/pkinit-certs/privkey.pem
src/tests/pkinit-certs/user-enc.p12
src/tests/pkinit-certs/user-upn.p12
src/tests/pkinit-certs/user-upn.pem
src/tests/pkinit-certs/user-upn2.p12
src/tests/pkinit-certs/user-upn2.pem
src/tests/pkinit-certs/user-upn3.p12
src/tests/pkinit-certs/user-upn3.pem
src/tests/pkinit-certs/user.p12
src/tests/pkinit-certs/user.pem