From bd34ab275a68113103a13692ec232c0f600a8c17 Mon Sep 17 00:00:00 2001 From: Joe Rayhawk Date: Wed, 29 Mar 2017 20:00:46 -0700 Subject: genca: also generate empty certificate revocation list --- genca.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/genca.sh b/genca.sh index 3af90d5..dc3e302 100755 --- a/genca.sh +++ b/genca.sh @@ -17,3 +17,5 @@ echo 1000 > "$CA"/ca/"$CA".serial touch "$CA"/ca/"$CA".idx openssl req -config "$OPENSSL_CONFIG" -new -x509 -days "$EXPIRE" -extensions v3_ca -keyout "$CA"/ca/"$CA".key -out "$CA"/ca/"$CA".crt chmod 600 "$CA"/ca/"$CA".key +echo Generating revocation list... +openssl ca -config "$OPENSSL_CONFIG" -gencrl -out "$CA"/ca/"$CA".crl -- cgit v1.2.3