ca-install: Mention that validation is done.

[hcoop/scripts.git] / ca-sign

diff --git a/ca-sign b/ca-sign
index 687ad5b..68b6c88 100755 (executable)
--- a/ca-sign
+++ b/ca-sign
@@ -5,7 +5,11 @@
 #
 # Usage: ca-sign days request.csr out-cert-file.pem
 
-test -n "$3" || exit 1
+if test -n "$3" || test -z "$2"; then
+    echo "Incorrect arguments."
+    echo "Usage: ca-sign days request.csr out-cert-file.pem"
+    exit 1
+fi
 
 DIR=/var/local/lib/ca
 CONF=$DIR/openssl.cnf
@@ -31,9 +35,9 @@ cp $REQUEST $DIR/requests/$ID.csr
 
 # Update revocation list.
 echo "Updating certificate revocation list ..."
-openssl ca -config $CONF -batch -gencrl -crldays 180 -out $CRL1.pem
+openssl ca -config $CONF -batch -gencrl -crldays 30 -out $CRL1.pem
 openssl crl -outform DER -out $CRL1.crl -in $CRL1.pem
-openssl ca -config $CONF -batch -gencrl -crldays 180 -crlexts crl_ext \
+openssl ca -config $CONF -batch -gencrl -crldays 30 -crlexts crl_ext \
     -out $CRL2.pem
 openssl crl -outform DER -out $CRL2.crl -in $CRL2.pem
 cp $CRL1.crl $CRL2.crl $CA_LOC