1 files changed, 71 insertions, 0 deletions
diff --git a/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh b/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh
new file mode 100755
index 0000000..0337389
--- /dev/null
+++ b/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh
@@ -0,0 +1,71 @@
+#!/bin/bash
+
+# Copyright (c) 2012 The Chromium Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# This script generates certificates for the unittests in
+# net/base/client_cert_store_unittest.cc. The output files are versioned in
+# net/data/ssl/certificates (client_1.pem, client_2.pem).
+
+try () {
+  echo "$@"
+  $@ || exit 1
+}
+
+# For each authority below a root ca certificate and one client certificate will
+# be created.
+authorities="1 2"
+
+try rm -rf out
+try mkdir out
+
+for id in $authorities
+do
+  # Generate a private key for the root cert.
+  try openssl genrsa -out out/root_$id.key 2048
+
+  # Create a certificate signing request for the root cert.
+  ID=$id \
+  DISTINGUISHED_NAME=ca_dn \
+  try openssl req \
+    -new \
+    -key out/root_$id.key \
+    -out out/root_$id.csr \
+    -config client_authentication.cnf
+
+  # Sign the root cert.
+  ID=$id \
+  DISTINGUISHED_NAME=ca_dn \
+  try openssl x509 \
+    -req -days 3650 \
+    -in out/root_$id.csr \
+    -signkey out/root_$id.key \
+    -out out/root_$id.pem
+    -config client_authentication.cnf
+
+  # Generate a private key for the client.
+  try openssl genrsa -out out/client_$id.key 2048
+
+  # Create a certificate signing request for the client cert.
+  ID=$id \
+  DISTINGUISHED_NAME=client_dn \
+  try openssl req \
+    -new \
+    -key out/client_$id.key \
+    -out out/client_$id.csr \
+    -config client_authentication.cnf
+
+  try touch out/$id-index.txt
+  try echo 1 > out/$id-serial
+
+  ID=$id \
+  DISTINGUISHED_NAME=client_dn \
+  try openssl ca \
+    -batch \
+    -in out/client_$id.csr \
+    -cert out/root_$id.pem \
+    -keyfile out/root_$id.key \
+    -out out/client_$id.pem \
+    -config client_authentication.cnf
+done