mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-16 12:47:00 +00:00
Code Issues Projects Releases Wiki Activity

create-user-key-store.sh: allow user to specify openssl x509 'days' param

Browse Source 
allow openssl x509 '--days' parameter to be specified via command line argument

Signed-off-by: Corey Cothrum <contact@coreycothrum.com>
This commit is contained in:
Corey Cothrum
2020-12-08 08:29:48 -06:00
committed by Jia Zhang
parent d6ca3fa224
commit 8adff592ef
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-signing-key/scripts/create-user-key-store.sh
+8 -2
View File
@@ -5,6 +5,7 @@ _D=`dirname "$_S"`
ROOT_DIR="`cd "$_D" && pwd`" ROOT_DIR="`cd "$_D" && pwd`"
KEYS_DIR="$ROOT_DIR/user-keys" KEYS_DIR="$ROOT_DIR/user-keys"
OPENSSL_DAYS="3650"
GPG_KEYNAME= GPG_KEYNAME=
GPG_EMAIL= GPG_EMAIL=
GPG_COMMENT= GPG_COMMENT=
@@ -49,6 +50,8 @@ Options:
-bgp <Boot Loader GPG passphrase> -bgp <Boot Loader GPG passphrase>
-bp <Boot loader config password> -bp <Boot loader config password>
-ip <IMA passphrase> -ip <IMA passphrase>
--days Specify the number of days to make a certificate valid for
Default: $OPENSSL_DAYS
-h|--help Show this help information. -h|--help Show this help information.
Overides: Overides:
-bc <gpg key comment> -bc <gpg key comment>
@@ -133,6 +136,9 @@ while [ $# -gt 0 ]; do
-ip) -ip)
shift && IMA_PASS="$1" shift && IMA_PASS="$1"
;; ;;
--days)
shift && OPENSSL_DAYS="$1"
;;
-h|--help) -h|--help)
show_help `basename $0` show_help `basename $0`
exit 0 exit 0
@@ -173,7 +179,7 @@ ca_sign() {
# Self signing ? # Self signing ?
if [ "$key_name" = "$ca_key_name" ]; then if [ "$key_name" = "$ca_key_name" ]; then
openssl req -new -x509 -newkey rsa:2048 \ openssl req -new -x509 -newkey rsa:2048 \
-sha256 -nodes -days 3650 \ -sha256 -nodes -days $OPENSSL_DAYS \
-subj "$subject" \ -subj "$subject" \
-keyout "$key_dir/$key_name.key" \ -keyout "$key_dir/$key_name.key" \
-out "$key_dir/$key_name.crt" \ -out "$key_dir/$key_name.crt" \
@@ -223,7 +229,7 @@ ca_sign() {
-CA "$ca_cert" \ -CA "$ca_cert" \
-CAform "$ca_cert_form" \ -CAform "$ca_cert_form" \
-CAkey "$ca_key_dir/$ca_key_name.key" \ -CAkey "$ca_key_dir/$ca_key_name.key" \
-set_serial 1 -days 3650 \ -set_serial 1 -days $OPENSSL_DAYS \
-extfile "$ROOT_DIR/openssl.cnf" -extensions v3_req \ -extfile "$ROOT_DIR/openssl.cnf" -extensions v3_req \
-out "$key_dir/$key_name.crt" \ -out "$key_dir/$key_name.crt" \
|| print_fatal "openssl failure" || print_fatal "openssl failure"