Lines Matching refs:cert
10 # MKCERT makes a self-signed cert
39 ${MKCERT} -key ca/key.pem -out ca/cert.pem <<EOF
71 ${CA} -extensions caExt -days 3560 -in ca2.csr -out ca2/cert.pem
73 csr_fields ExpiredCA | ${REQ} -new -key ca1/key.pem -out ca1/cert.csr
75 csr_fields NotYetValidCA | ${REQ} -new -key ca3/key.pem -out ca3/cert.csr
78 -in ca1/cert.csr -keyfile ca1/key.pem -out ca1/cert.pem -selfsign
81 -in ca3/cert.csr -keyfile ca3/key.pem -out ca3/cert.pem -selfsign
152 cat ca/cert.pem ca[1234].pem > calist.pem
191 ${CA} -days 900 -in ${f}.csr -out ${f}.cert
194 ${CA} -startdate `asn1date "2 days ago"` -enddate `asn1date "yesterday"` -in expired.csr -out expired.cert
196 ${CA} -startdate `asn1date "tomorrow"` -enddate `asn1date "2 days"` -in notyet.csr -out notyet.cert
200 -in altname${n}.csr -out altname${n}.cert
204 CADIR=./ca2 ${CA} -days 900 -in server.csr -out ca2server.cert
206 # cert.
207 cat ca2server.cert ca2/cert.pem > ca2server.pem
210 CADIR=./ca1 ${CA} -days 3 -in server.csr -out ca1server.cert
213 CADIR=./ca3 ${CA} -days 3 -in server.csr -out ca3server.cert
215 MKPKCS12="${OPENSSL} pkcs12 -export -passout stdin -in client.cert -inkey client.key"
217 # generate a PKCS12 cert from the client cert: -passOUT because it's the
218 # passphrase on the OUTPUT cert, confusing...
221 # generate a PKCS#12 cert with no password and a friendly name
224 # PKCS#12 cert with DSA key
227 -in clientdsa.cert -inkey clientdsa.key \
230 # generate a PKCS#12 cert with no friendly name
233 # generate a PKCS#12 cert with no private keys
236 # generate a PKCS#12 cert without the cert
239 # generate an encoded PKCS#12 cert with no private keys
242 # a PKCS#12 cert including a bundled CA cert
243 echo foobar | ${MKPKCS12} -certfile ca/cert.pem -name "A Neon Client Cert With CA" -out clientca.p12
247 cat ca/cert.pem server.cert > chain.pem