Changeset 145:71c79b41791c in freeDiameter for contrib

Timestamp:

Dec 22, 2009, 1:35:32 PM (14 years ago)

Author:

Sebastien Decugis <sdecugis@nict.go.jp>

Branch:

default

Phase:

public

Message:

Better handle the CRL hierarchy

File:

• contrib/ca_script2/Makefile (modified) (4 diffs)

contrib/ca_script2/Makefile

@@ -55 +55 @@
         @mkdir -p $(DATA_DIR)/$(caname)
         @mkdir $(DATA_DIR)/$(caname)/public
+        @mkdir $(DATA_DIR)/$(caname)/public/crl
         @mkdir $(DATA_DIR)/$(caname)/private
         @chmod 700 $(DATA_DIR)/$(caname)/private
@@ -102 +103 @@
         @cat $(DATA_DIR)/$(ca)/public/cachain.pem $(DATA_DIR)/$(name)/public/cacert.pem > $(DATA_DIR)/$(name)/public/cachain.pem
         @ln -s ../../$(ca)/public/caroot.pem $(DATA_DIR)/$(name)/public/caroot.pem
+        @for CRL in `cd $(DATA_DIR)/$(ca)/public/crl && ls -1`; do ln -s ../../../$(ca)/public/crl/$(CRL) $(DATA_DIR)/$(name)/public/crl/; done
         @$(REMAKE) gencrl ca=$(name)
 
@@ -129 +131 @@
         # Compiled informations for the client
         @cat $(DATA_DIR)/$(ca)/clients/$(name)/cert.pem $(DATA_DIR)/$(ca)/public/cachain.pem > $(DATA_DIR)/$(ca)/clients/$(name)/certchain.pem
-        @ln -sf ../../public/crl.pem $(DATA_DIR)/$(ca)/clients/$(name)/crl.pem
+        @ln -sf ../../public/crl $(DATA_DIR)/$(ca)/clients/$(name)/crl
         @ln -sf ../../public/caroot.pem $(DATA_DIR)/$(ca)/clients/$(name)/ca.pem
 
@@ -148 +150 @@
         @if [ -z "$(ca)" ]; then echo "Missing parameter. Ex: make gencrl ca=ca.testbed.aaa"; exit 1; fi
         # Create the CRL (keep the old one?)
-        @CA_ROOT_DIR=$(DATA_DIR)/$(ca) openssl ca $(CONFIG) -gencrl -out $(DATA_DIR)/$(ca)/public/crl.pem
-        @ln -s crl.pem $(DATA_DIR)/$(ca)/public/`openssl crl -noout -hash < $(DATA_DIR)/$(ca)/public/crl.pem`.r0
+        @CA_ROOT_DIR=$(DATA_DIR)/$(ca) openssl ca $(CONFIG) -gencrl -out $(DATA_DIR)/$(ca)/public/crl/$(ca).pem
+        @ln -s crl.pem $(DATA_DIR)/$(ca)/public/`openssl crl -noout -hash < $(DATA_DIR)/$(ca)/public/crl/$(ca).pem`.r0
 
 # End of file...