mirror of
https://github.com/Cateners/tiny_computer.git
synced 2026-05-21 00:45:49 +08:00
Update code to v1.0.14 (10)
This commit is contained in:
Caten
210
android/extern/wolfssl/certs/rsapss/renew-rsapss-certs.sh
vendored
Normal file
210
android/extern/wolfssl/certs/rsapss/renew-rsapss-certs.sh
vendored
Normal file
@@ -0,0 +1,210 @@
|
||||
#!/bin/bash
|
||||
|
||||
check_result(){
|
||||
if [ $1 -ne 0 ]; then
|
||||
echo "Failed at \"$2\", Abort"
|
||||
exit 1
|
||||
else
|
||||
echo "Step Succeeded!"
|
||||
fi
|
||||
}
|
||||
|
||||
############################################################
|
||||
####### update the self-signed root-rsapss.pem #############
|
||||
############################################################
|
||||
echo "Updating root-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSA-PSS\\nRoot-RSA-PSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n.\\n.\\n" | \
|
||||
openssl req -new -key root-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out root-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in root-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions ca_ecc_cert -signkey root-rsapss-priv.pem -out root-rsapss.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm root-rsapss.csr
|
||||
|
||||
openssl x509 -in root-rsapss.pem -outform DER > root-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in root-rsapss.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem root-rsapss.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
####### update ca-rsapss.pem signed by root ################
|
||||
############################################################
|
||||
echo "Updating ca-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nCA-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key ca-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out ca-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in ca-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions ca_ecc_cert -CA root-rsapss.pem -CAkey root-rsapss-priv.pem -set_serial 01 -out ca-rsapss.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm ca-rsapss.csr
|
||||
|
||||
openssl x509 -in ca-rsapss.pem -outform DER > ca-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in ca-rsapss.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem ca-rsapss.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
####### update server-mix-rsapss.pem signed by ca ##########
|
||||
############################################################
|
||||
echo "Updating server-mix-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nServer-MIX-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key ../server-key.pem -config ../renewcerts/wolfssl.cnf -nodes -out server-mix-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in server-mix-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions server_ecc -CA ../ca-cert.pem -CAkey ../ca-key.pem -sigopt rsa_padding_mode:pss -set_serial 01 -out server-mix-rsapss-cert.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm server-mix-rsapss.csr
|
||||
|
||||
openssl x509 -in server-mix-rsapss-cert.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem server-mix-rsapss-cert.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
####### update server-rsapss.pem signed by ca ##############
|
||||
############################################################
|
||||
echo "Updating server-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nServer-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key server-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out server-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in server-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions server_ecc -CA ca-rsapss.pem -CAkey ca-rsapss-priv.pem -set_serial 01 -out server-rsapss-cert.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm server-rsapss.csr
|
||||
|
||||
openssl x509 -in server-rsapss-cert.pem -outform DER > server-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in server-rsapss-cert.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem server-rsapss-cert.pem
|
||||
cat server-rsapss-cert.pem ca-rsapss.pem > server-rsapss.pem
|
||||
check_result $? "Add CA into server cert"
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
####### update the self-signed client-rsapss.pem ###########
|
||||
############################################################
|
||||
echo "Updating client-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nClient-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key client-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out client-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in client-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions wolfssl_opts -signkey client-rsapss-priv.pem -out client-rsapss.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm client-rsapss.csr
|
||||
|
||||
openssl x509 -in client-rsapss.pem -outform DER > client-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in client-rsapss.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem client-rsapss.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
|
||||
################################################################################
|
||||
# 3072-bit keys. RSA-PSS with SHA-384
|
||||
################################################################################
|
||||
|
||||
############################################################
|
||||
###### update the self-signed root-3072-rsapss.pem #########
|
||||
############################################################
|
||||
echo "Updating root-3072-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSA-PSS\\nRoot-RSA-PSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n.\\n.\\n" | \
|
||||
openssl req -new -key root-3072-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out root-3072-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in root-3072-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions ca_ecc_cert -signkey root-3072-rsapss-priv.pem -sha384 -out root-3072-rsapss.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm root-3072-rsapss.csr
|
||||
|
||||
openssl x509 -in root-3072-rsapss.pem -outform DER > root-3072-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in root-3072-rsapss.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem root-3072-rsapss.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
###### update ca-3072-rsapss.pem signed by root ############
|
||||
############################################################
|
||||
echo "Updating ca-3072-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nCA-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key ca-3072-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out ca-3072-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in ca-3072-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions ca_ecc_cert -CA root-3072-rsapss.pem -CAkey root-3072-rsapss-priv.pem -sha384 -set_serial 01 -out ca-3072-rsapss.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm ca-3072-rsapss.csr
|
||||
|
||||
openssl x509 -in ca-3072-rsapss.pem -outform DER > ca-3072-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in ca-3072-rsapss.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem ca-3072-rsapss.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
###### update server-3072-rsapss.pem signed by ca ##########
|
||||
############################################################
|
||||
echo "Updating server-3072-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nServer-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key server-3072-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out server-3072-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in server-3072-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions server_ecc -CA ca-3072-rsapss.pem -CAkey ca-3072-rsapss-priv.pem -sha384 -set_serial 01 -out server-3072-rsapss-cert.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm server-3072-rsapss.csr
|
||||
|
||||
openssl x509 -in server-3072-rsapss-cert.pem -outform DER > server-3072-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in server-3072-rsapss-cert.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem server-3072-rsapss-cert.pem
|
||||
cat server-3072-rsapss-cert.pem ca-3072-rsapss.pem > server-3072-rsapss.pem
|
||||
check_result $? "Add CA into server cert"
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
############################################################
|
||||
###### update the self-signed client-3072-rsapss.pem #######
|
||||
############################################################
|
||||
echo "Updating client-3072-rsapss.pem"
|
||||
echo ""
|
||||
#pipe the following arguments to openssl req...
|
||||
echo -e "US\\nMontana\\nBozeman\\nwolfSSL_RSAPSS\\nClient-RSAPSS\\nwww.wolfssl.com\\ninfo@wolfssl.com\\n\\n\\n\\n" | openssl req -new -key client-3072-rsapss-priv.pem -config ../renewcerts/wolfssl.cnf -nodes -out client-3072-rsapss.csr
|
||||
check_result $? "Generate request"
|
||||
|
||||
openssl x509 -req -in client-3072-rsapss.csr -days 1000 -extfile ../renewcerts/wolfssl.cnf -extensions wolfssl_opts -signkey client-3072-rsapss-priv.pem -sha384 -out client-3072-rsapss.pem
|
||||
check_result $? "Generate certificate"
|
||||
rm client-3072-rsapss.csr
|
||||
|
||||
openssl x509 -in client-3072-rsapss.pem -outform DER > client-3072-rsapss.der
|
||||
check_result $? "Convert to DER"
|
||||
openssl x509 -in client-3072-rsapss.pem -text > tmp.pem
|
||||
check_result $? "Add text"
|
||||
mv tmp.pem client-3072-rsapss.pem
|
||||
echo "End of section"
|
||||
echo "---------------------------------------------------------------------"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user