meta-signing-key: enable authorityKeyIdentifier for x509 v3

Otherwise the x509 parser in kernel cannot load a x509 certificate without
authorityKeyIdentifier.

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
This commit is contained in:
Lans Zhang
2017-07-03 20:54:51 +08:00
parent 1ec1fed661
commit 34c28b6a2d
6 changed files with 57 additions and 54 deletions

View File

@@ -1,28 +1,28 @@
-----BEGIN PRIVATE KEY----- -----BEGIN PRIVATE KEY-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDeb7b3/KgZRU1A MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC1zbVTvepaUFh4
r0DhUxB8O/nbr4QaTsbV5B1RCA3Kkf9lGYZaYiOdPxP74BnMsJGQNQB96roZ/YkP NA5xCGNJSmslWY+pIAOYkDdpRjvyaPoewwBYW3TJ/+9oGqRMfq/HPf3VUKQto2EX
+KFFh48O2slcMSlwOY9cY5/9nWmhTgwmWElueyPks7Nc2lsxbBRFzJhvay7nfz9B o4SDLMwSgRtiJpP3hyUs+/qXa/y/Ip4Mv0vQQuQQ6nocpvsmLCGJQhAPIfgL3rVf
KGTF/3jlefItrJ9ROxNZGcoFHg1KAfZLrRjc1cOfwO9aLof0tk9g4nRhg2tY0o6J vvV664q6Y76zHcgFtn95kGnNDY5vVcW7G864eqFIruB5A5y1R6iA9ovg+10vQw1c
WexD1Vz/mWcZgmo2kB4dZfmSf5H8gJu60KgojAWAQK1DqN2wYjJqi3w+lwFa+t87 8BhIAX8RJdsk+25vwjtRR7TLAgC/Eiy6jlyNVGCCmqjBg0FKiq6VcLUfhkvtesUr
1OAvA8Z1aUcw3T9rPo33fbEb5gqqngwvoEbyWxcYMUeF4DvpdpUEyjNRjp7m5lnJ lNCqWmvesfykNlg/DT4yudoUdgloGnSCRtjDHGmDEz7foqindoPwZ+VKOcQlVDIL
lvl4rpRNAgMBAAECggEASv0ChAvrZ8mTR7FNgCkOr7NQgp1jPbM9GTK0J3M9owMh 2zB40QYTAgMBAAECggEAOWJaz7nsVOFza02TGV56aFHTDBD+5XUzbV5n/xSqK1Oz
RKYcQzA+rW5sgEeGqxkDmcgkiE6vur9ci8PYKqaOtgVQSQJR5AGjsRPtBgUhbT3w Ty5h14HWlUPxfzyZi4OZXBxXGJPBnp4pMVrtorHrIBQcXpiqr8C6nT5T1KPDPVlh
nqS47MQaz6k9WJpMkBbNptJYuYc64tRlMMQ7ZPzBdytrV7aQZ0QxO6KUFrGQ7Vem 5cgj1/KlJim8rXqPX3cihr6RbxVbw/Nh8HzH4yqhuT9um/7Ueekmx2or2wtiYAV7
waWA3V4bDCvZ0PzKjSeFfvL0RiQTVAgnZ8PMz8y1UhDPr2DoDABlk1igylkm1tF8 1GoIWvIP/tEnSLiPDtkHu/u71IggqsI2NZMx4ojfIrtRd3m7M5NGNYK95fasCfoY
i5XNNVQpZfrU1Y7Ja4NtlZKJZuMTb4w3ZB05/ZovNum9VdrR+Xr8YLC3Udc1r4QZ WfNHNowR6fNI8hhpTJd4eVf5v3oM0KziE+gy+APYTxMsH+P/D+9/f9ZAOnt/mIbe
eaKV7Y1MSt2Vcz7VNNBb12llzzcoWRWejNmIdI07gQKBgQD+tRLzJT1OhfUc+IlG FScxOjrMADkGFKDS1q2fMfjMpdZa24iBmwvbEMILsQKBgQDv6QO3wtl54ZT1mvBi
vwuGCs+ZC8tdmiD4a2S4g1OdzmTaOL9BkqnxrtjskCe8aMTK7fvMfzhb6UFG/TMH PQBsppRu8WEqoaGN0VKfh5+tOFeEgiOnaMHGvr56TKrJyFj5fuRCHNyVHEaGI7a8
OpuTFUthEmbKMrqI83K7kAP3iFhivGo85zNwB1DAMe9swqHseyvOyrCr0jcoyK6Q DkcFs55QVhI4MWUzLMYF44zjG4iMoNkQ3BvdbBEKzwcbWVILLhweXsl+MrfbvufC
lKtruGxDVo3xmsubvSYl3JbqcQKBgQDfkLaHehq8N7nonlSXpfFjpP+EBtrSBmYv XLiq/jHunPjqgtLeQhtL9+NUjQKBgQDB/xGFaUkzqxpWQ4gUrq4RMcknZwB6iwVn
hycKyRYvRkTGWLnNoGUN9h1l9jNkNi13hcbgBzX38EKYBlHiTGC3AUR5hPwGRtJM /CpcfTkiEeaqjptAtkhicecEel+a8y6wcrDL4bZ7s3zQmWBdq7vDZ7grOQiavh4Z
IPscjAqHPK4HzKt2hRkpb6Q3TyglACJlNLiDLx0Ju7leevXUWlBhIF5u32Q8fB7q nwrmyscYTpdEj9mKwnmXCdyQMk3cjvZ3MGke6btQ9Cvi301IqKQuo6asEbrp5clQ
+hv+5bIdnQKBgFgzD7rOvGoCjRxZHAA5i54BBF407VkeVChx19Dk+QF+RQIkAGaO YMMoiWEtHwKBgQCT2uGlsPpi+TnanCCmCr5mN8unDDA8G9z7EBSBqQ4prV2Slrnu
iPa92zQfvwLJLMwwmK75puR84zPX3eG088Z86ztUCfAenOVrl+FHP3hp6GFYaVlp hMtX91pg+TsQnN7o9OEsNalkZEa6iOwnvgzbYLWjAUi9RQP/pApuuqyrkt52/PKK
njA++EF1iTkaNMQU6tiS65a0FpGy3HAIa0vD8wlmYYS2W6c0Wo9l0YShAoGAJVVF R30M23stVCYnHsdHiKVfuj8n/Y3+agtfZ9GP4JVZX3iw3uuies9j5GRASQKBgFCu
Jdp+HHAx22aVOb28Uad8A9AhOnFXHxiyrFpoGfzh/z1RycS/G1W+EwjKDDH/5bWx PCM3/nG2n2VxAI9ZdptAEWCJvfE5EC6G+Tct/SzmNQCJ/peTN9d5d5KtMkXHDYvk
QDf0CzNT648inWejvuu3Q5OxglrRQ2U+icXY/Dxl02eaOnB/gyvhgFr3mTYsiDoF pxKj9LjNlQNMRn+uhJBn+ng/aAyzNOGC+42wl8zMIq0pBlhnORpPx6NQyIEKFAbN
leKINtfiXKSr6IosYgvFuT4UvwT7JMIfarFwzQECgYA7ExwbDmIRIQv90gsMKeqr 42ov2u94HShlpkapnF6pQRAe75WHM4pyM7gQKpIRAoGATpgOFlCtVb28mszrgV8g
Uqa5qHFO4yiwQtL62gebiBYFIg3YyIR9KDXOLG6H8/ZhkOuZZAEGUwD4upVHBUpx OEQI9rRCrSEGi0fTKzZ8FPDDN6Ic+MLXknqCshEfxD889SJ4IMV84uiXd8+gfPHN
UbbgB6d131lWlMNNyE0PYvGtnQyfPf17tQ+/2cjm7XND+KOr+FcEk5yZrp6WZBLJ 6peHzdwlC5dd+7JL/IHmvRc6V2/ow4RkyONvzhbehIMEsRYvwdf179LdSkQh/3ZO
eBkLu91VLcnvu2/aXxCYpw== MJ6oqhi1Y92Sp3/R0Lh8bFI=
-----END PRIVATE KEY----- -----END PRIVATE KEY-----

View File

@@ -1,28 +1,28 @@
-----BEGIN PRIVATE KEY----- -----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCbrDb72QTbFZ+i MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDIYw6V76JkHaSG
5equHkCaU/NVMxYfME3dhcnoXdPfjEqx+oKlJPqnfK+YLkAvOnyBV3cW+d1cneLl 1mswZ7g9Ed6TprtZpcSNrqvLnMHxs7C7peUfcrXhSu1Iz220B1kcHzw8QgsRdOCa
wKQ/lP8TtXNfUJA5RLS82CsjWYpFdImOpCv7V+hBMS9sIyu0UhqXTGCBhgHK7bno OB3QYVlbYNlZTghh/ZyPsjpmeN55IdLO0zM2XkngzSS1oeW+UFDoFK1znRpEBgZv
hw8NJxMx7XmeSSuQSSnkERPtZC8jFWn0Nq1hZXUjNr592RNQ+HCHl4vRPSWPsWTn wiTWU51UzK2jQ07SPOd4GT9Y1bvyLNevoyWHKllaZoutgDGNe53sf2BpEJaLppJ5
nXwgWOJDJ8h2bOcfaQzL9kOO0aV26cP+7hpdy1fNHSl5ACfj6LtU07pAfvTxNS83 FksVXZnn4+/ZLdnkLp+mtFn3Whf7/ZEBkt6on4OvuQBWf+fztUBOEr+3ZqiVzov3
0mVDxzRSgYQAZGkrUECTdOdsZQruazzFR4x7qKEjBUSi9bTsNBGc0L+mX+zG1GZg /TphNUgUIUZ9jkKlSvHQ6dvZgjdbjO4ZXnz214oLLPRkUOXEm1+BO3eQsmTYLfyS
SXPszA4JAgMBAAECggEAcV9ll9tAdxHzdd5+IJq1r+9t6uHOvZ4fRzK1jj4vHMJ+ H/aEy7//AgMBAAECggEAe39BD/rd9CGoskkXSn/BtjF7IThSoo9dMYyC6Du184Yw
b8oitYUN60aaV3lvkzXEESqS96+3cEkoQu0ecZPghQkD4im5L4wDGPlRyWfflJ+/ 15UIPndtzGlnD8Z278rPiltdvi1dsOZ9Pc5z4Wb9sSlhCn7i/7FTeeP3xgub4L+N
wpt70IwAAOKCR/4BSUz2QrQEILBow9KIL3mVE54ek6EAjq95Q5aVJJzvZ1csIR7H slXLbCh0E42aoC4k70OEeWO0+lnKRD4KXXojRcvGXOq/4KysuTk71nKI7fDbogYV
b+CGRWH3894aFSlq86M3LTreyHKVBaOGIvCiALQhczUahdXCV6ZMbNX6rlnNyVPs XID/TmYfC8TweBv60Qslr+sexUfGNg4+BV36NqaSVStnHJE0PXeMzuL7hbKzEKN2
ksTdLcFqA4Xaiwpn10Kex/bOTZ/8P7ff68V5/S7sRXQLRBzLhnymtnZIVilzImZS TQ641Aqosd+gf2s9K7Vhq+FnHrUFJDKM1mT28iPIGH7e6PVW13A72QaEEEEcPT6F
njHVV+1O17Ur5bNuODAZe8F7JAiBFudGr1oKAIyDgQKBgQDM9tZBwCb7dsjWKjlO U23zeCg+68M2PMD4Ig/6bxj/ADVYvzwovvPyMF/6gQKBgQDu6LLPY2hGQyfakgka
uV+ok1mgsNj4nOhf1JpJS1HrTH88Zc/ThJIYENYps7uQo5ruJb/K825qyG3JmS6y NefeabY/QOSYuGb7zntw1TZY5EZahtFmuM0CLJ1O0Rb+QICJcz5mRoDF7Pxl9rNO
Rp/rf/tGd4OgAnG3J1FLkV6Kx5MD0GWjSTzEubD59tjZ9l9I0eaF3dIPRVOrWRsY uerM1+m3ndYC4QZm1YZY9Fj2sr+Q8TpHmjB/RIe8OXzGo/uG9GQmLUW9nN+NqU7X
fIis11gjcPEAxu7SLHcyhKX8kQKBgQDCb1vqCODnvF6kl/ASRes0aiqDSQTMGK0e fHpszhcePjPOB1OY7TncH2j1HwKBgQDWuODfWlipPlbJxNgvw1bozclt7DWAhR7v
l4Q4e8whYI386mrygPevMkKFm+v1y9PHSE1LzW0AePPukCh2mQSTYV5802mWQJs2 AsGyGban6P8tWZwrRv3p2Xf2+hvZetka3xw2jMRKWfBYg39lPxlG3uLMSrkmPLm8
LgHl7dqwt5p/TpgkY3TPljiq8U2v/wnUL0GIfg+EO0nsFlnLJmU75AMCE72vl6XJ 9DWdKyD8B0WLxI8ayvdwk1cgTgKZABw39pL7irwBEDEex4mPmZLrIAkyB8pMmr6T
ScKN5kmV+QKBgD1UVsQR1RhFcM70j3VI7qCohpcYk7PAb5/NI+VujjKUDzZpWIh4 y3TBkgf5IQKBgAaSmlDAUF8We+M0f1GcSAvDZsMouuFEuXiV/qllBEC/zvuwl9Q2
EKb20r5js2oSKle8H+mAcbeuBXvfRCPAEjYLc4qgVFhaouAk+aRc+ScZlJn9j4wO o1U6+vzvHa3TAnZFmGLh76sCURNRDS/OR5ppGkH18qxTmoR7vV13I3duBX0sVckg
bAqJbbU98aE2oUhO1mWT/Djpi6Gn5f2rtdHSFeN09gg/flKRT5FkM66hAoGBAJly gdMOhJl2D2u7mTDmSlcOicukpDXWgZfGEewqY1JuraguZWtgo2Xd61pLAoGBAIft
3W1kuGrrRR5NMxCY0bm6F/cox3pz9xzvo1AYk8+7rhNuxhzBH7jKx6k+lwiTZn4e 4e2DND1vyWFRy8nwz0PxgmKj9fq2Sy7jf9tPi+IgDeqXn9WFy5gOo3MmQhsbOfVY
V7J9W4tF6e3bI7QFq5DNBY8qImiMcHJf+OuHvlI9dNcIJhaBz4yNGAgBDLjbZNxq 6HNgCaNH7G8cT7m4iDflQY4yf6NFLhAASTCF7QufTtd8R1uewaXyoGVC/UH+X97N
tyOLqZ9IU1zZfuBPWxHbL2ySO9+6pQKpDbyDhIuxAoGAT8eZzFJXOtdUwzHWCiYH qZ6z5PCHX5EsoFjXz7opPaj+ZYK5M4w8cF1aJNIBAoGAcpFShqUYLBKfSnpQEoTa
PmSzKg7zT6TLXnW2uOvfJAG6RgXmlCew7YvvsvwKARtwB3Xh+VCHevaIGpoT6wwe cfxXzG/yst+5vGybft8g7TjFvHbnqP/+Nq+VcLZJWXGcdTob1q5+7IkCAAPEv53E
Z96nzpvyRzBXg3/NT+b8mdCZRK9DvEfc+1Wnlj9gYk5ncKFDaHswTjEIcy2wUdYm X7FCPMtFzGAL6++T2fsoFPbVpqJZMLd2NUopxwk73uXTdfcNlZse9UJsfE2PphJN
cZTek5jdrbbN9KwOflwAUrg= RGdmOUaX9YasTQGHidkbRYs=
-----END PRIVATE KEY----- -----END PRIVATE KEY-----

View File

@@ -86,9 +86,10 @@ ca_sign() {
openssl x509 -req -in "$key_dir/$key_name.csr" \ openssl x509 -req -in "$key_dir/$key_name.csr" \
-CA "$ca_cert" \ -CA "$ca_cert" \
-CAform "$ca_cert_form" \ -CAform "$ca_cert_form" \
-CAkey "$ca_key_dir/$ca_key_name.key" \ -CAkey "$ca_key_dir/$ca_key_name.key" \
-set_serial 1 -days 3650 \ -set_serial 1 -days 3650 \
-out "$key_dir/$key_name.crt" -extfile openssl.cnf -extensions v3_req \
-out "$key_dir/$key_name.crt"
rm -f "$key_dir/$key_name.csr" rm -f "$key_dir/$key_name.csr"
fi fi

View File

@@ -0,0 +1,2 @@
[v3_req]
authorityKeyIdentifier=keyid:always