1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
OPENSSL=openssl
ifndef DIR
DIR := .
endif
ifdef PASSWORD
P12PASS := true
else
P12PASS := @echo No PASSWORD defined. && false
endif
.PRECIOUS: %/testca
.PHONY: %/clean target all p12pass
all: client server
client: p12pass
echo $(DIR)
$(MAKE) target DIR=$(DIR) TARGET=client EXTENSIONS=client_ca_extensions
server: p12pass
$(MAKE) target DIR=$(DIR) TARGET=server EXTENSIONS=server_ca_extensions
p12pass:
$(P12PASS)
target: $(DIR)/testca
mkdir $(DIR)/$(TARGET)
{ ( cd $(DIR)/$(TARGET) && \
openssl genrsa -out key.pem 2048 &&\
openssl req -new -key key.pem -out req.pem -outform PEM\
-subj /CN=$$(hostname)/O=$(TARGET)/L=$$$$/ -nodes &&\
cd ../testca && \
openssl ca -config openssl.cnf -in ../$(TARGET)/req.pem -out \
../$(TARGET)/cert.pem -notext -batch -extensions \
$(EXTENSIONS) && \
cd ../$(TARGET) && \
openssl pkcs12 -export -out keycert.p12 -in cert.pem -inkey key.pem \
-passout pass:$(PASSWORD) ) || (rm -rf $(DIR)/$(TARGET) && false); }
$(DIR)/testca:
mkdir $(DIR)/testca
cp openssl.cnf $(DIR)/testca/openssl.cnf
{ ( cd $(DIR)/testca && \
mkdir certs private && \
chmod 700 private && \
echo 01 > serial && \
touch index.txt && \
openssl req -x509 -config openssl.cnf -newkey rsa:2048 -days 365 \
-out cacert.pem -outform PEM -subj /CN=MyTestCA/L=$$$$/ -nodes && \
openssl x509 -in cacert.pem -out cacert.cer -outform DER ) \
|| (rm -rf $@ && false); }
clean:
rm -rf $(DIR)/testca
rm -rf $(DIR)/server
rm -rf $(DIR)/client
|
