5635823e17
As in the past, to avoid rewriting various autotests that contain line-number information, an extra blank line has been inserted at the end of the license text to ensure that this commit does not change the total number of lines in the license header. Change-Id: I311e001373776812699d6efc045b5f742890c689 Reviewed-by: Rohan McGovern <rohan.mcgovern@nokia.com>
105 lines
5.0 KiB
Bash
Executable File
105 lines
5.0 KiB
Bash
Executable File
#!/bin/sh
|
|
#############################################################################
|
|
##
|
|
## Copyright (C) 2012 Nokia Corporation and/or its subsidiary(-ies).
|
|
## Contact: http://www.qt-project.org/
|
|
##
|
|
## This file is the build configuration utility of the Qt Toolkit.
|
|
##
|
|
## $QT_BEGIN_LICENSE:LGPL$
|
|
## GNU Lesser General Public License Usage
|
|
## This file may be used under the terms of the GNU Lesser General Public
|
|
## License version 2.1 as published by the Free Software Foundation and
|
|
## appearing in the file LICENSE.LGPL included in the packaging of this
|
|
## file. Please review the following information to ensure the GNU Lesser
|
|
## General Public License version 2.1 requirements will be met:
|
|
## http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html.
|
|
##
|
|
## In addition, as a special exception, Nokia gives you certain additional
|
|
## rights. These rights are described in the Nokia Qt LGPL Exception
|
|
## version 1.1, included in the file LGPL_EXCEPTION.txt in this package.
|
|
##
|
|
## GNU General Public License Usage
|
|
## Alternatively, this file may be used under the terms of the GNU General
|
|
## Public License version 3.0 as published by the Free Software Foundation
|
|
## and appearing in the file LICENSE.GPL included in the packaging of this
|
|
## file. Please review the following information to ensure the GNU General
|
|
## Public License version 3.0 requirements will be met:
|
|
## http://www.gnu.org/copyleft/gpl.html.
|
|
##
|
|
## Other Usage
|
|
## Alternatively, this file may be used in accordance with the terms and
|
|
## conditions contained in a signed written agreement between you and Nokia.
|
|
##
|
|
##
|
|
##
|
|
##
|
|
##
|
|
##
|
|
## $QT_END_LICENSE$
|
|
##
|
|
#############################################################################
|
|
|
|
# This script generates digital certificates of different types.
|
|
|
|
#--- Certificates ---------------------------------------------------------------------------
|
|
echo -e "\ngenerating 1024-bit RSA private key to PEM file ..."
|
|
openssl genrsa -out rsa-pri-1024.pem 1024
|
|
|
|
echo -e "\ngenerating the corresponding public key to PEM and DER file ..."
|
|
openssl rsa -in rsa-pri-1024.pem -pubout -out rsa-pub-1024.pem
|
|
openssl rsa -in rsa-pri-1024.pem -pubout -out rsa-pub-1024.der -outform der
|
|
|
|
echo -e "\ngenerating certificate signing request (CSR) ..."
|
|
openssl req -out req.pem -new -key rsa-pri-1024.pem -subj "/CN=name\/with\/slashes/C=NO"
|
|
|
|
echo -e "\n generating a self-signed certifificate to PEM file ..."
|
|
openssl x509 -req -in req.pem -out cert-ss.pem -signkey rsa-pri-1024.pem
|
|
|
|
echo -e "\n generating a self-signed certifificate to DER file ..."
|
|
openssl x509 -req -in req.pem -out cert-ss.der -signkey rsa-pri-1024.pem -outform der
|
|
|
|
echo -e "\n generating a certifificate signed by a dummy CA to PEM file ..."
|
|
openssl x509 -req -in req.pem -out cert.pem -CA ca-cert.pem -set_serial 17
|
|
|
|
echo -e "\n generating a certifificate signed by a dummy CA to DER file ..."
|
|
openssl x509 -req -in req.pem -out cert.der -CA ca-cert.pem -set_serial 17 -outform der
|
|
|
|
#--- Public keys --------------------------------------------------------------------------------
|
|
echo -e "\n associate public keys with all certificates ..."
|
|
# Note: For now, there is only one public key (encoded in both PEM and DER), but that could change.
|
|
/bin/cp rsa-pub-1024.pem cert-ss.pem.pubkey
|
|
/bin/cp rsa-pub-1024.der cert-ss.der.pubkey
|
|
/bin/cp rsa-pub-1024.pem cert.pem.pubkey
|
|
/bin/cp rsa-pub-1024.der cert.der.pubkey
|
|
|
|
#--- Digests --------------------------------------------------------------------------------
|
|
echo -e "\n generating md5 and sha1 digests of all certificates ..."
|
|
for digest in md5 sha1
|
|
do
|
|
openssl x509 -in ca-cert.pem -noout -fingerprint -$digest > ca-cert.pem.digest-$digest
|
|
openssl x509 -in cert-ss.pem -noout -fingerprint -$digest > cert-ss.pem.digest-$digest
|
|
openssl x509 -in cert.pem -noout -fingerprint -$digest > cert.pem.digest-$digest
|
|
done
|
|
|
|
#--- Subjet Alternative Name extension ----------------------------------------------------
|
|
echo -e "\n generating self signed root cert. with Subject Alternative Name extension (X509v3) ..."
|
|
outname=cert-ss-san.pem
|
|
openssl req -out req-san.pem -new -key rsa-pri-1024.pem -subj "/CN=Johnny GuitarC=NO"
|
|
openssl req -x509 -in req-san.pem -out $outname -key rsa-pri-1024.pem \
|
|
-config san.cnf -extensions subj_alt_name
|
|
/bin/cp san.cnf $outname.san
|
|
|
|
#--- Non-ASCII Subject ---------------------------------------------------------------------
|
|
echo -e "\n generating self signed root cert. with Subject containing UTF-8 characters ..."
|
|
outname=cert-ss-san-utf8.pem
|
|
#subject="/O=HĕĂƲÿ ʍếʈặḻ Récördŝ/OU=㈧A㉁ｫBC/CN=Johnny Guitar/C=NO"
|
|
subject=$'/O=H\xc4\x95\xc4\x82\xc6\xb2\xc3\xbf \xca\x8d\xe1\xba\xbf\xca\x88\xe1\xba\xb7\xe1\xb8\xbb R\xc3\xa9c\xc3\xb6rd\xc5\x9d/OU=\xe3\x88\xa7A\xe3\x89\x81\xef\xbd\xabBC/CN=Johnny Guitar/C=NO'
|
|
openssl req -out req-san.pem -new -key rsa-pri-1024.pem -utf8 -subj "$subject"
|
|
openssl req -x509 -in req-san.pem -out $outname -key rsa-pri-1024.pem \
|
|
-config san.cnf -extensions subj_alt_name -nameopt multiline,utf8,-esc_msb
|
|
/bin/cp san.cnf $outname.san
|
|
|
|
echo -e "\n cleaning up ..."
|
|
/bin/rm rsa-pri-1024.pem rsa-pub-1024.* req*.pem
|