Преглед изворни кода

Autocomplete fields in email client cert

Bob Mottram пре 10 година
родитељ
комит
faee7f9d91
2 измењених фајлова са 8 додато и 2 уклоњено
  1. 1
    1
      src/freedombone
  2. 7
    1
      src/freedombone-clientcert

+ 1
- 1
src/freedombone Прегледај датотеку

5698
   echo 'serial = sslserial' >> /etc/ssl/dovecot-ca.cnf
5698
   echo 'serial = sslserial' >> /etc/ssl/dovecot-ca.cnf
5699
   echo 'default_days = 3650' >> /etc/ssl/dovecot-ca.cnf
5699
   echo 'default_days = 3650' >> /etc/ssl/dovecot-ca.cnf
5700
   echo 'default_md = sha256' >> /etc/ssl/dovecot-ca.cnf
5700
   echo 'default_md = sha256' >> /etc/ssl/dovecot-ca.cnf
5701
-  echo 'default_bits = 2048' >> /etc/ssl/dovecot-ca.cnf
5701
+  echo 'default_bits = 4096' >> /etc/ssl/dovecot-ca.cnf
5702
   echo 'policy = dovecot-ca_policy' >> /etc/ssl/dovecot-ca.cnf
5702
   echo 'policy = dovecot-ca_policy' >> /etc/ssl/dovecot-ca.cnf
5703
   echo 'x509_extensions = dovecot-ca_extensions' >> /etc/ssl/dovecot-ca.cnf
5703
   echo 'x509_extensions = dovecot-ca_extensions' >> /etc/ssl/dovecot-ca.cnf
5704
   echo '' >> /etc/ssl/dovecot-ca.cnf
5704
   echo '' >> /etc/ssl/dovecot-ca.cnf

+ 7
- 1
src/freedombone-clientcert Прегледај датотеку

33
 # along with this program. If not, see <http://www.gnu.org/licenses/>.
33
 # along with this program. If not, see <http://www.gnu.org/licenses/>.
34
 
34
 
35
 USERNAME=
35
 USERNAME=
36
+COUNTRY_CODE="US"
37
+AREA="Free Speech Zone"
38
+LOCATION="Freedomville"
39
+ORGANISATION="Freedombone"
40
+UNIT="Freedombone Unit"
41
+EXTENSIONS=""
36
 
42
 
37
 function show_help {
43
 function show_help {
38
     echo ''
44
     echo ''
95
 freedombone-addcert -h $USERNAME
101
 freedombone-addcert -h $USERNAME
96
 
102
 
97
 # create a certificate request
103
 # create a certificate request
98
-openssl req -new -sha256 -key /etc/ssl/private/$USERNAME.key -out /etc/ssl/requests/$USERNAME.csr
104
+openssl req -new -sha256 -subj "/O=$ORGANISATION/OU=$UNIT/C=$COUNTRY_CODE/ST=$AREA/L=$LOCATION/CN=$USERNAME" -key /etc/ssl/private/$USERNAME.key -out /etc/ssl/requests/$USERNAME.csr
99
 
105
 
100
 # sign the certificate request
106
 # sign the certificate request
101
 openssl ca -config /etc/ssl/dovecot-ca.cnf -in /etc/ssl/requests/$USERNAME.csr -out /etc/ssl/certs/$USERNAME.cer
107
 openssl ca -config /etc/ssl/dovecot-ca.cnf -in /etc/ssl/requests/$USERNAME.csr -out /etc/ssl/certs/$USERNAME.cer