diff options
| author | Joe Rayhawk <jrayhawk@omgwallhack.org> | 2011-12-08 19:43:54 -0800 |
|---|---|---|
| committer | Joe Rayhawk <jrayhawk@omgwallhack.org> | 2011-12-08 19:43:54 -0800 |
| commit | 4afcbf84726868ef35da6aaf7d50a841e6275d95 (patch) | |
| tree | d3a48efcff31146eea23a6d4fee701a9bbb7de03 /signcsr.sh | |
| parent | 9f1ba206a6e5fb68680934b244f1a9377e894682 (diff) | |
| download | cash-4afcbf84726868ef35da6aaf7d50a841e6275d95.tar.gz cash-4afcbf84726868ef35da6aaf7d50a841e6275d95.zip | |
SPKAC HTTP provisioning.
Diffstat (limited to 'signcsr.sh')
| -rwxr-xr-x | signcsr.sh | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -38,5 +38,7 @@ fi if [ -e "$CA"/certs/"$SERIAL".pem ]; then # openssl lacks useful exit status codes, so we check to see if it actually did anything instead. mv -i "$1" "$CA"/signed/$NAME.csr ln "$CA"/certs/"$SERIAL".pem "$CA"/signed/"$NAME".crt # so we can find the certificate by name as well as serial - echo "Use ./mailcert.sh $NAME [emailaddress] to use sendmail to deliver the CA and user certificate." + openssl x509 -in "$CA"/certs/"$SERIAL".pem -outform DER -out "$CA"/signed/"$NAME".der # Chrome compatible + echo "* Web: $CA/signed/$NAME.der with Content-type: application/x-x509-user-cert is suggested." + echo "* Email: use ./mailcert.sh $NAME [emailaddress] to use sendmail to deliver the CA and user certificate as PEM MIME attachments." fi |