Blame SOURCES/renew-dummy-cert

c05f5d
#!/bin/bash
c05f5d
c05f5d
if [ $# -eq 0 ]; then
c05f5d
	echo $"Usage: `basename $0` filename" 1>&2
c05f5d
	exit 1
c05f5d
fi
c05f5d
c05f5d
PEM=$1
c05f5d
REQ=`/bin/mktemp /tmp/openssl.XXXXXX`
c05f5d
KEY=`/bin/mktemp /tmp/openssl.XXXXXX`
c05f5d
CRT=`/bin/mktemp /tmp/openssl.XXXXXX`
c05f5d
NEW=${PEM}_
c05f5d
c05f5d
trap "rm -f $REQ $KEY $CRT $NEW" SIGINT
c05f5d
c05f5d
if [ ! -f $PEM ]; then
c05f5d
	echo "$PEM: file not found" 1>&2
c05f5d
	exit 1
c05f5d
fi
c05f5d
c05f5d
let -a SERIAL=0x$(openssl x509 -in $PEM -noout -serial | cut -d= -f2)
c05f5d
let SERIAL++
c05f5d
c05f5d
umask 077
c05f5d
c05f5d
OWNER=`ls -l $PEM | awk '{ printf "%s.%s", $3, $4; }'`
c05f5d
c05f5d
openssl rsa -inform pem -in $PEM -out $KEY
c05f5d
openssl x509 -x509toreq -in $PEM -signkey $KEY -out $REQ
c05f5d
openssl x509 -req -in $REQ -signkey $KEY -set_serial $SERIAL -days 365 \
c05f5d
	-extfile /etc/pki/tls/openssl.cnf -extensions v3_ca -out $CRT
c05f5d
c05f5d
(cat $KEY ; echo "" ; cat $CRT) > $NEW
c05f5d
c05f5d
chown $OWNER $NEW
c05f5d
c05f5d
mv -f $NEW $PEM
c05f5d
c05f5d
rm -f $REQ $KEY $CRT
c05f5d
c05f5d
exit 0
c05f5d