X-Git-Url: https://git.hcoop.net/hcoop/scripts.git/blobdiff_plain/4c237a2485281a1d7141162ec88890d2e17b2445..139a90c847a6c77158d0b67e44aefddbc240c122:/ca-sign diff --git a/ca-sign b/ca-sign index 687ad5b..68b6c88 100755 --- a/ca-sign +++ b/ca-sign @@ -5,7 +5,11 @@ # # Usage: ca-sign days request.csr out-cert-file.pem -test -n "$3" || exit 1 +if test -n "$3" || test -z "$2"; then + echo "Incorrect arguments." + echo "Usage: ca-sign days request.csr out-cert-file.pem" + exit 1 +fi DIR=/var/local/lib/ca CONF=$DIR/openssl.cnf @@ -31,9 +35,9 @@ cp $REQUEST $DIR/requests/$ID.csr # Update revocation list. echo "Updating certificate revocation list ..." -openssl ca -config $CONF -batch -gencrl -crldays 180 -out $CRL1.pem +openssl ca -config $CONF -batch -gencrl -crldays 30 -out $CRL1.pem openssl crl -outform DER -out $CRL1.crl -in $CRL1.pem -openssl ca -config $CONF -batch -gencrl -crldays 180 -crlexts crl_ext \ +openssl ca -config $CONF -batch -gencrl -crldays 30 -crlexts crl_ext \ -out $CRL2.pem openssl crl -outform DER -out $CRL2.crl -in $CRL2.pem cp $CRL1.crl $CRL2.crl $CA_LOC