FM / certs

/opt/imh-python/lib/python3.9/site-packages/slapdtest/certs/

/opt/imh-python/lib/python3.9/site-packages/slapdtest/certs

Name	Size	Mode	Actions
ca.conf	1641	0644	edit dl rm
ca.pem	4413	0644	edit dl rm
client.conf	296	0644	edit dl rm
client.key	1704	0644	edit dl rm
client.pem	4499	0644	edit dl rm
gencerts.sh	1284	0755	edit dl rm
gennssdb.sh	807	0755	edit dl rm
README	949	0644	edit dl rm
server.conf	315	0644	edit dl rm
server.key	1704	0644	edit dl rm
server.pem	4751	0644	edit dl rm

Edit: /opt/imh-python/lib/python3.9/site-packages/slapdtest/certs/gencerts.sh (1284B)

#!/bin/sh
# Written by Christian Heimes
set -e

export CAOUTDIR=.
export CATMPDIR=tmp

rm -rf $CATMPDIR
rm -rf ca.pem ca.key server.pem server.key client.pem client.key
rm -rf cert9.db key4.db pkcs11.tx

mkdir -p $CAOUTDIR
mkdir -p $CATMPDIR

touch $CATMPDIR/ca.db
touch $CATMPDIR/ca.db.attr
echo '01' > $CATMPDIR/ca.crt.srl
echo '01' > $CATMPDIR/ca.crl.srl

# root CA
openssl req -new \
    -config ca.conf \
    -out $CATMPDIR/ca.csr \
    -keyout $CAOUTDIR/ca.key \
    -batch

openssl ca -selfsign \
    -config ca.conf \
    -in $CATMPDIR/ca.csr \
    -out $CAOUTDIR/ca.pem \
    -extensions ca_ext \
    -days 356300 \
    -batch

# server cert
openssl req -new \
    -config server.conf \
    -out $CATMPDIR/server.csr \
    -keyout $CAOUTDIR/server.key \
    -batch

openssl ca \
    -config ca.conf \
    -in $CATMPDIR/server.csr \
    -out $CAOUTDIR/server.pem \
    -policy match_pol \
    -extensions server_ext \
    -batch

# client cert
openssl req -new \
    -config client.conf \
    -out $CATMPDIR/client.csr \
    -keyout $CAOUTDIR/client.key \
    -batch

openssl ca \
    -config ca.conf \
    -in $CATMPDIR/client.csr \
    -out $CAOUTDIR/client.pem \
    -policy match_pol \
    -extensions client_ext \
    -batch

# cleanup
rm -rf $CATMPDIR ca.key

echo DONE

cmd: