← Back to branch summary

~ubuntu-branches/ubuntu/hardy/openswan/hardy-updates

« back to all changes in this revision

Viewing changes to testing/baseconfigs/genx509keys.sh

  • Committer: Bazaar Package Importer
  • Author(s): Rene Mayrhofer
  • Date: 2005-01-27 16:10:11 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20050127161011-idgybmyz3vwhpfiq
Tags: 2.3.0-2
http://bugs.debian.org/292458
http://bugs.debian.org/291143
Urgency HIGH due to security issue and problems with build-deps in sarge.
* Fix the security issue. Please see
  http://www.idefense.com/application/poi/display?id=190&
      type=vulnerabilities&flashstatus=false
  for more details. Thanks to Martin Schulze for informing me about
  this issue.
  Closes: #292458: Openswan XAUTH/PAM Buffer Overflow Vulnerability
* Added a Build-Dependency to lynx.
  Closes: #291143: openswan: FTBFS: Missing build dependency.

Show diffs side-by-side

added added

removed removed

Lines of Context:
testing/baseconfigs/genx509keys.sh
1
 
 1098  ls
2
 
 1099  cd etc
3
 
 1100  ls
4
 
 1101  mkdir CA
5
 
 1102  cd CA
6
 
 1103  ls
7
 
 1104       openssl req -x509 -days 1460 -newkey rsa:2048 \\n                 -keyout caKey.pem -out caCert.pem
8
 
 1105  openssl genrsa -out ca.pem 1024
9
 
 1106       openssl req -x509 -days 1460 -key ca.pem \\n                 -keyout caKey.pem -out caCert.pem
10
 
 1107       openssl req -x509 -days 1460 -new -key ca.pem \\n                 -keyout caKey.pem -out caCert.pem
11
 
 1108  ls
12
 
 1109  openssl x509 -in caCert.pem -noout -text
13
 
 1110  pwd
14
 
 1111  ls
15
 
 1112  openssl ca -in ../../../east/etc/ipsec.d/private/east.req -days 730 -out ../../../east/etc/ipsec.d/eastCert.pem -notext
16
 
 1113  openssl ca -in ../../../east/etc/ipsec.d/private/east.req -days 730 -out ../../../east/etc/ipsec.d/eastCert.pem -notext -cakey ca.pem
 
1
#!/bin/sh
 
2
 
 
3
# HACK up the config file first
 
4
 
 
5
source ../../umlsetup.sh
 
6
 
 
7
sed -e "s,@BUILDTOP@,$BUILDTOP," nic/etc/openssl/openssl.cnf.in >nic/etc/openssl/openssl.cnf
 
8
 
 
9
for host in east west north
 
10
do
 
11
    if [ ! -r all/etc/ipsec.d/certs/${host}.uml.freeswan.org.cert ]
 
12
    then
 
13
            openssl ca -config nic/etc/openssl/openssl.cnf -in $host/etc/ipsec.d/private/$host.req -days 730 -out all/etc/ipsec.d/certs/${host}.uml.freeswan.org.cert -notext -keyfile nic/etc/CA/private/cakey.pem
 
14
    fi
 
15
 
 
16
done
 
17
 
 
18
# now update the CRL list.
 
19
openssl ca -config nic/etc/openssl/openssl.cnf -gencrl -out all/etc/ipsec.d/crls/nic.pem
 
20