summaryrefslogtreecommitdiffstats
path: root/net/data/ssl/scripts/redundant-ca.cnf
diff options
context:
space:
mode:
authormattm@chromium.org <mattm@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2014-02-04 02:01:06 +0000
committermattm@chromium.org <mattm@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2014-02-04 02:01:06 +0000
commitae52c0b0946fe8b91658bbc08f6007e354cf4eed (patch)
treeff71c2b0acb49728022f47f4f5336a176d429b3a /net/data/ssl/scripts/redundant-ca.cnf
parentb702655f628ad575943fa43b776fa8aea56c6905 (diff)
downloadchromium_src-ae52c0b0946fe8b91658bbc08f6007e354cf4eed.zip
chromium_src-ae52c0b0946fe8b91658bbc08f6007e354cf4eed.tar.gz
chromium_src-ae52c0b0946fe8b91658bbc08f6007e354cf4eed.tar.bz2
test-cert generation scripts: Remove some dead code.
generate-redundant-test-chains.sh and generate-duplicate-cn-certs.sh contain some stuff copied from other scripts that isn't actually useful. BUG=none R=rsleevi@chromium.org Review URL: https://codereview.chromium.org/132443005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@248660 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/data/ssl/scripts/redundant-ca.cnf')
-rw-r--r--net/data/ssl/scripts/redundant-ca.cnf46
1 files changed, 13 insertions, 33 deletions
diff --git a/net/data/ssl/scripts/redundant-ca.cnf b/net/data/ssl/scripts/redundant-ca.cnf
index e1b24e0..b03eb81 100644
--- a/net/data/ssl/scripts/redundant-ca.cnf
+++ b/net/data/ssl/scripts/redundant-ca.cnf
@@ -1,21 +1,18 @@
+CA_DIR = out
+
[ca]
default_ca = CA_root
preserve = yes
# The default test root, used to generate certificates and CRLs.
[CA_root]
-dir = $ENV::CA_DIR
-key_size = $ENV::KEY_SIZE
-algo = $ENV::ALGO
-cert_type = $ENV::CERT_TYPE
-type = $ENV::TYPE
-certificate = $ENV::CERTIFICATE
-database = $dir/$type-index.txt
-new_certs_dir = $dir
-serial = $dir/$type-serial
-certificate = $dir/$certificate.pem
-private_key = $dir/$type.key
-RANDFILE = $dir/rand
+dir = ${ENV::CA_DIR}
+database = ${dir}/${ENV::CERTIFICATE}-index.txt
+new_certs_dir = ${dir}
+serial = ${dir}/${ENV::CERTIFICATE}-serial
+certificate = ${dir}/${ENV::CERTIFICATE}.pem
+private_key = ${dir}/${ENV::CERTIFICATE}.key
+RANDFILE = ${dir}/rand
default_days = 3650
default_crl_days = 30
default_md = sha1
@@ -51,30 +48,13 @@ commonName = optional
emailAddress = optional
[req]
-# The request section used to generate the root CA certificate. This should
-# not be used to generate end-entity certificates. For certificates other
-# than the root CA, see README to find the appropriate configuration file
-# (ie: openssl_cert.cnf).
-default_bits = $ENV::KEY_SIZE
+# The request section used to generate certificate requests.
+default_bits = 2048
default_md = sha1
string_mask = utf8only
prompt = no
encrypt_key = no
-distinguished_name = $ENV::CA_NAME
-
-[req_ca_dn]
-C = US
-ST = California
-L = Mountain View
-O = Test CA
-CN = Test Root 2 CA
-
-[req_intermediate_dn]
-C = US
-ST = California
-L = Mountain View
-O = Test CA
-CN = Test Intermediate 2 CA
+distinguished_name = req_env_dn
[req_env_dn]
-CN = $ENV::CA_COMMON_NAME
+CN = ${ENV::CA_COMMON_NAME}