Changeset 274:c8e57b3ca75f in freeDiameter

Timestamp:

Apr 22, 2010, 4:09:02 PM (14 years ago)

Author:

thedoc@morbier.koganei.wide.ad.jp

Branch:

default

Phase:

public

Message:

Updated script to avoid 1 month valid root certs

File:

• contrib/ca_script2/Makefile (modified) (1 diff)

contrib/ca_script2/Makefile

@@ -69 +69 @@
         @$(REMAKE) structure caname=$(topca)
         # Generate the self-signed certificate
-        @CA_ROOT_DIR=$(DATA_DIR)/$(topca) openssl req $(CONFIG) -new -batch -x509 -nodes -newkey rsa:$(cakeysize) -out $(DATA_DIR)/$(topca)/public/cacert.pem \
-                -keyout $(DATA_DIR)/$(topca)/private/cakey.pem -subj /CN=$(topca)
+        @CA_ROOT_DIR=$(DATA_DIR)/$(topca) openssl req $(CONFIG) -new -batch -x509 -days 3650 -nodes -newkey rsa:$(cakeysize) -out $(DATA_DIR)/$(topca)/public/cacert.pem \
+                -keyout $(DATA_DIR)/$(topca)/private/cakey.pem -extensions ca_cert -subj /CN=$(topca)
         @ln -s cacert.pem $(DATA_DIR)/$(topca)/public/`openssl x509 -noout -hash < $(DATA_DIR)/$(topca)/public/cacert.pem`.0
         @touch $(DATA_DIR)/$(topca)/public/cachain.pem