kmwebnet/OpenSK
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

OpenSSL x509 version changed to v3 (#456)

Browse Source
This commit is contained in:
Bubun Das
2022-04-11 18:34:27 +05:30
committed by GitHub
parent 2db7971430
commit 81996f650e
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
tools/gen_key_materials.sh
View File

@@ -14,6 +14,8 @@
# limitations under the License. # limitations under the License.
generate_crypto_materials () { generate_crypto_materials () {
# OpenSSL ext file location
local openssl_ext_file=tools/openssl.ext
# OpenSK AAGUID # OpenSK AAGUID
local aaguid_file=crypto_data/aaguid.txt local aaguid_file=crypto_data/aaguid.txt
@@ -80,12 +82,13 @@ generate_crypto_materials () {
-new \ -new \
-key "${opensk_key}" \ -key "${opensk_key}" \
-out "${opensk_cert_name}.csr" \ -out "${opensk_cert_name}.csr" \
-subj "/CN=OpenSK Hacker Edition" -subj "/C=US/O=OpenSK/OU=Authenticator Attestation/CN=OpenSK Hacker Edition"
"${openssl}" x509 \ "${openssl}" x509 \
-req \ -req \
-days 3652 \ -days 3652 \
-in "${opensk_cert_name}.csr" \ -in "${opensk_cert_name}.csr" \
-CA "${ca_cert_name}.pem" \ -CA "${ca_cert_name}.pem" \
-extfile "${openssl_ext_file}" \
-CAkey "${ca_priv_key}" \ -CAkey "${ca_priv_key}" \
-CAcreateserial \ -CAcreateserial \
-outform pem \ -outform pem \

1
tools/openssl.ext Normal file
View File

@@ -0,0 +1 @@
basicConstraints=CA:FALSE