denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add some notes about how to reissue attribute certificates

Browse Source
This commit is contained in:
Martin Willi
2014-10-03 12:31:01 +02:00
parent 16469e8474
commit 7ab320def3
3 changed files with 61 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/acert-fallback/reissue.txt
+15
View File
@@ -0,0 +1,15 @@
# Carols expired acert for finance
pki --acert \
--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
--in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \
--group finance -F "01.01.13 08:00:00" -l 240 -f pem \
> ./hosts/carol/etc/ipsec.d/acerts/carol-finance-expired.pem
# Carols valid acert for sales
pki --acert \
--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
--in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \
--group sales -l 87600 -f pem \
> hosts/carol/etc/ipsec.d/acerts/carol-sales.pem