@@ -107,17 +107,25 @@ check_result $?
107107# remove revoked so next time through the normal CA won't have server revoked
108108cp blank.index.txt demoCA/index.txt
109109
110+ echo " Step 12"
111+ # revoke an intermediate cert
112+ openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../intermediate/ca-int-cert.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
113+ openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out extra-crls/ca-int-cert-revoked.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem
114+
115+ # remove revoked so next time through the normal CA won't have server revoked
116+ cp blank.index.txt demoCA/index.txt
117+
110118# caEccCrl
111- echo " Step 10 "
119+ echo " Step 13 "
112120openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-revoked-cert.pem -keyfile ../ca-ecc-key.pem -cert ../ca-ecc-cert.pem
113121check_result $?
114122
115- echo " Step 11 "
123+ echo " Step 14 "
116124openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out caEccCrl.pem -keyfile ../ca-ecc-key.pem -cert ../ca-ecc-cert.pem
117125check_result $?
118126
119127# metadata
120- echo " Step 13 "
128+ echo " Step 15 "
121129openssl crl -in caEccCrl.pem -text > tmp
122130check_result $?
123131mv tmp caEccCrl.pem
@@ -128,69 +136,69 @@ mv tmp caEccCrl.pem
128136# server-revoked-cert.pem is already revoked in Step 10
129137# openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-revoked-cert.pem -keyfile ../ca-ecc384-key.pem -cert ../ca-ecc384-cert.pem
130138
131- echo " Step 14 "
139+ echo " Step 16 "
132140openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out caEcc384Crl.pem -keyfile ../ca-ecc384-key.pem -cert ../ca-ecc384-cert.pem
133141check_result $?
134142
135143# metadata
136- echo " Step 15 "
144+ echo " Step 17 "
137145openssl crl -in caEcc384Crl.pem -text > tmp
138146check_result $?
139147mv tmp caEcc384Crl.pem
140148# install (only needed if working outside wolfssl)
141149# cp caEcc384Crl.pem ~/wolfssl/certs/crl/caEcc384Crl.pem
142150
143151# cliCrl
144- echo " Step 16 "
152+ echo " Step 18 "
145153openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out cliCrl.pem -keyfile ../client-key.pem -cert ../client-cert.pem
146154check_result $?
147155
148156# metadata
149- echo " Step 17 "
157+ echo " Step 19 "
150158openssl crl -in cliCrl.pem -text > tmp
151159check_result $?
152160mv tmp cliCrl.pem
153161# install (only needed if working outside wolfssl)
154162# cp cliCrl.pem ~/wolfssl/certs/crl/cliCrl.pem
155163
156164# eccCliCRL
157- echo " Step 18 "
165+ echo " Step 20 "
158166openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out eccCliCRL.pem -keyfile ../ecc-client-key.pem -cert ../client-ecc-cert.pem
159167check_result $?
160168
161169# metadata
162- echo " Step 19 "
170+ echo " Step 21 "
163171openssl crl -in eccCliCRL.pem -text > tmp
164172check_result $?
165173mv tmp eccCliCRL.pem
166174# install (only needed if working outside wolfssl)
167175# cp eccCliCRL.pem ~/wolfssl/certs/crl/eccCliCRL.pem
168176
169177# eccSrvCRL
170- echo " Step 20 "
178+ echo " Step 22 "
171179openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out eccSrvCRL.pem -keyfile ../ecc-key.pem -cert ../server-ecc.pem
172180check_result $?
173181
174182# metadata
175- echo " Step 21 "
183+ echo " Step 23 "
176184openssl crl -in eccSrvCRL.pem -text > tmp
177185check_result $?
178186mv tmp eccSrvCRL.pem
179187# install (only needed if working outside wolfssl)
180188# cp eccSrvCRL.pem ~/wolfssl/certs/crl/eccSrvCRL.pem
181189
182190# caEccCrl
183- echo " Step 22 "
191+ echo " Step 24 "
184192openssl ca -config ./wolfssl.cnf -gencrl -crldays 1000 -out caEccCrl.pem -keyfile ../ca-ecc-key.pem -cert ../ca-ecc-cert.pem
185193check_result $?
186194
187195# ca-ecc384-cert
188- echo " Step 23 "
196+ echo " Step 25 "
189197openssl ca -config ./wolfssl.cnf -gencrl -crldays 1000 -out caEcc384Crl.pem -keyfile ../ca-ecc384-key.pem -cert ../ca-ecc384-cert.pem
190198check_result $?
191199
192200# create crl and crl2 der files for unit test
193- echo " Step 24 "
201+ echo " Step 26 "
194202openssl crl -in crl.pem -inform PEM -out crl.der -outform DER
195203openssl crl -in crl2.pem -inform PEM -out crl2.der -outform DER
196204
0 commit comments