summaryrefslogtreecommitdiffstats
path: root/scripts/subca-ca-sign.sh
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2018-02-02 18:47:17 +0100
committerEndi S. Dewata <edewata@redhat.com>2018-02-02 18:47:17 +0100
commitec842e618d1def4eab56a56db315fca83e53b48c (patch)
tree62c39ae9c115f1a782600e19b534dce3c315c942 /scripts/subca-ca-sign.sh
parent75c76bdaf20b783e0764845e1e0b65a15f42fe4a (diff)
downloadpki-dev-ec842e618d1def4eab56a56db315fca83e53b48c.tar.gz
pki-dev-ec842e618d1def4eab56a56db315fca83e53b48c.tar.xz
pki-dev-ec842e618d1def4eab56a56db315fca83e53b48c.zip
Updated sub CA scripts.
Diffstat (limited to 'scripts/subca-ca-sign.sh')
-rwxr-xr-xscripts/subca-ca-sign.sh13
1 files changed, 13 insertions, 0 deletions
diff --git a/scripts/subca-ca-sign.sh b/scripts/subca-ca-sign.sh
new file mode 100755
index 0000000..a55249f
--- /dev/null
+++ b/scripts/subca-ca-sign.sh
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+#pki cert-show 0x1 --output tmp/external.crt
+#openssl crl2pkcs7 -nocrl -certfile tmp/external.crt -out tmp/cert_chain.p7b
+#pki -d /etc/pki/pki-tomcat/alias -c Secret.123 client-cert-show ca_signing --cert tmp/external.crt
+pki-server cert-export ca_signing --cert-file tmp/external.crt
+
+./ca_signing-ca-sign.sh
+
+openssl crl2pkcs7 -nocrl \
+ -certfile tmp/external.crt \
+ -certfile tmp/ca_signing.crt \
+ -out tmp/ca_signing.p7b