HCoop
/
clinton
/
scripts.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
ca-sign: Tell clients using our CA cert to update CRL every 30 days
[clinton/scripts.git]
/
ca-sign
diff --git
a/ca-sign
b/ca-sign
index
687ad5b
..
78e4a87
100755
(executable)
--- a/
ca-sign
+++ b/
ca-sign
@@
-31,9
+31,9
@@
cp $REQUEST $DIR/requests/$ID.csr
# Update revocation list.
echo "Updating certificate revocation list ..."
# Update revocation list.
echo "Updating certificate revocation list ..."
-openssl ca -config $CONF -batch -gencrl -crldays
18
0 -out $CRL1.pem
+openssl ca -config $CONF -batch -gencrl -crldays
3
0 -out $CRL1.pem
openssl crl -outform DER -out $CRL1.crl -in $CRL1.pem
openssl crl -outform DER -out $CRL1.crl -in $CRL1.pem
-openssl ca -config $CONF -batch -gencrl -crldays
18
0 -crlexts crl_ext \
+openssl ca -config $CONF -batch -gencrl -crldays
3
0 -crlexts crl_ext \
-out $CRL2.pem
openssl crl -outform DER -out $CRL2.crl -in $CRL2.pem
cp $CRL1.crl $CRL2.crl $CA_LOC
-out $CRL2.pem
openssl crl -outform DER -out $CRL2.crl -in $CRL2.pem
cp $CRL1.crl $CRL2.crl $CA_LOC