|
Apache CXF example source code file (gencerts.sh)
The Apache CXF gencerts.sh source code#!/bin/sh # # Licensed to the Apache Software Foundation (ASF) under one # or more contributor license agreements. See the NOTICE file # distributed with this work for additional information # regarding copyright ownership. The ASF licenses this file # to you under the Apache License, Version 2.0 (the # "License"); you may not use this file except in compliance # with the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, # software distributed under the License is distributed on an # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY # KIND, either express or implied. See the License for the # specific language governing permissions and limitations # under the License. # # # # This file uses openssl and keytool to generate 2 chains of 3 certificates # CN=Wibble CN=Cherry # CN=TheRA # CN=TheCA # and generates a CRL to revoke the "CN=TheRA" certificate. # # This file also serves as a specification on what needs to be done to # get the underlying CXF to work correctly. # For the most part, you need to use only JKS (Java Key Store) formatted # keystores and truststores. # Initialize the default openssl DataBase. # According to a default /usr/lib/ssl/openssl.cnf file it is ./demoCA # Depending on the Openssl version, comment out "crlnumber" in config file. # We echo 1345 to start the certificate serial number counter. rm -rf demoCA mkdir -p demoCA/newcerts cp /dev/null demoCA/index.txt echo "1345" > demoCA/serial # This file makes sure that the certificate for CN=TheRA can be a Certificate # Authority, i.e. can sign the user certificates, e.g. "CN=Wibble". cat < |
... this post is sponsored by my books ... | |
#1 New Release! |
FP Best Seller |
Copyright 1998-2024 Alvin Alexander, alvinalexander.com
All Rights Reserved.
A percentage of advertising revenue from
pages under the /java/jwarehouse
URI on this website is
paid back to open source projects.