emo/make-ca
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
134 Commits 1 Branch 0 Tags
4bbde9a90b4b64b457f0c4e3082ace5d44ffef6b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
DJ Lucas 4bbde9a90b make-ca: Remove unneeded variable (leftover from testing). 2021-08-09 22:17:29 -05:00
DJ Lucas b138f67112 make-ca: Backup and restore anchors with PKIX extensions. 2021-08-09 22:14:46 -05:00
DJ Lucas c2a3d1d837 make-ca: Fix typo. 2021-08-08 22:32:37 -05:00
DJ Lucas c41b7f3d4b Makefile,make-ca: Use Microsoft's trust for code signing with -i | --mscodesign. 2021-08-08 11:03:12 -05:00
DJ Lucas 53ac95f8fd make-ca: remove workarounds and use certdata.txt values first, remove trailing spaces from x509 Subject derived p11label. 2021-08-08 00:26:59 -05:00
DJ Lucas 2c1da33970 make-ca: Special case for poorly named 'NetLock Arany' certs. 2021-08-07 20:16:17 -05:00
DJ Lucas 6e7e5a391c CHANGELOG: yet another typo. 2021-08-07 20:01:19 -05:00
DJ Lucas 5d764d2756 CHANGELOG: typo 2021-08-07 19:59:16 -05:00
DJ Lucas 3fc0a03bb5 :-) Properly thank miijoost for forcing me to fix all of the issues in get_p11_label(). 2021-08-07 19:58:24 -05:00
DJ Lucas 47d1fea7c4 CHANGELOG: clarify changes. 2021-08-07 19:53:35 -05:00
DJ Lucas 94c44961b8 make-ca: Revert change to use p11label for naming anchors. 2021-08-07 19:37:23 -05:00
DJ Lucas 0ea74dd846 make-ca: Additional normalizaton of p11label and fix a few corner cases. Thank you to Michael Joost for brining the issue to my attention. 2021-08-07 19:34:33 -05:00
DJ Lucas e02c930e6c make-ca: Fix DESTDIR if using a relative path. 2021-08-07 19:32:18 -05:00
DJ Lucas 51ffa79fa4 Fix help output for -a/--anchordir. 2021-08-07 01:48:22 -05:00
DJ Lucas c79ee2ff79 make-ca: Handle getopt style short options in get_args(). 2021-08-07 00:40:39 -05:00
DJ Lucas de5bf4a332 CS.txt: Updated code signing list 2021-08-06 23:31:39 -05:00
DJ Lucas f3913cb756 make-ca: minor text fixups to assiste with man-page output. 2021-08-05 23:56:09 -05:00
DJ Lucas 6938b0f70e README: change comment. 2021-08-05 23:34:27 -05:00
DJ Lucas 16c01c3249 make-ca: don't copy use -v when instaling cacerts.p12. 2021-08-05 23:28:54 -05:00
DJ Lucas f7a8c9f2f3 README,include.h2m: Sync documentation and fix typos. 2021-08-05 22:43:41 -05:00
DJ Lucas 8baf93dc22 make-ca: Use p11label value and .p11-kit extension for anchor naming. 2021-08-05 22:31:13 -05:00
DJ Lucas 0faf62233b copy-trust-modifications: Use X509v3 Key Usage section to determine local trust for anchros added using tust utiltiy. 2021-08-05 22:27:20 -05:00
DJ Lucas 62864a82a5 LICENSE,CHANGELOG: Fix grammar and typos. 2021-08-05 20:48:55 -05:00
DJ Lucas 26dabca6f0 CHANGELOG,README: udpate version requirements for p11-kit to 0.23.19. 2021-08-05 20:40:36 -05:00
DJ Lucas 6a96f18a6f LICENSE{,.MIT}:Clarify dual license. 2021-08-05 20:06:50 -05:00
DJ Lucas 0c4cc4ab0d README: clarify functionality. 2021-08-05 19:57:31 -05:00
DJ Lucas d7c3b6f28b make-ca: Correct incorrectly named get_p11_val(). 2021-08-05 19:39:08 -05:00
DJ Lucas 2284b419ed make-ca: Fix output of NSSDB and Java PCKS#12 stores. 2021-08-05 01:13:05 -05:00
DJ Lucas d857f7c530 make-ca: Use --filter=certificates for all stores. 2021-08-05 00:33:04 -05:00
DJ Lucas 6ee8e5316e make-ca: Add nss-{server,email}-distrust-after values in anchors. 2021-08-05 00:04:05 -05:00
DJ Lucas e38a575d03 CHANGELOG: add entry for previous commit. 2021-08-04 22:20:37 -05:00
DJ Lucas e4b5db9b34 make-ca,copy-trust-modifications: omit x-certificate-extension.p11kit and assume serverAuth 2021-08-04 22:17:50 -05:00
DJ Lucas 45e198f198 make-ca: remove accidently introduced debug output. 2021-08-04 21:29:31 -05:00
DJ Lucas 774b8d9792 make-ca: Complete removal of certname and minor text output fixes. 2021-08-04 21:11:41 -05:00
DJ Lucas 658a60fdb1 CHANGELOG: add missing changelog entries. 2021-08-04 20:41:19 -05:00
DJ Lucas bb6015a224 make-ca: Use 'Subject:' line for certificate name, and use last OU= value for fallback. 2021-08-04 20:38:53 -05:00
DJ Lucas fd033af881 make-ca: Use get_p11_label() for certificate name in output of local certs. 2021-08-04 20:35:31 -05:00
DJ Lucas 7d263b7491 Merge pull request #13 from renodr/patch-5 
README: Trivial text change
 2020-12-17 17:32:29 -06:00
DJ Lucas 775b4c0c05 Merge pull request #12 from renodr/patch-4 
make-ca.conf.dist: Fix typos in comment
 2020-11-12 21:19:59 -06:00
DJ Lucas 7c49ba10b0 Merge pull request #11 from renodr/patch-3 
make-ca: Update help text with typo fixes
 2020-11-12 21:19:32 -06:00
DJ Lucas 6b25e52945 Merge pull request #10 from renodr/patch-2 
README: Typo fixes
 2020-11-12 21:19:06 -06:00
DJ Lucas 4f1065d9cd Merge pull request #9 from renodr/patch-1 
CS.txt: Replace outdated URL with current URL
 2020-11-12 21:18:35 -06:00
DJ Lucas 7b1d9b13ac Merge pull request #8 from renodr/master 
CHANGELOG: Fix a few typos
 2020-11-12 21:17:59 -06:00
DJ Lucas 41c9ddb0b7 make-ca, CHANGELOG: post release version bump 2020-03-07 23:06:40 -06:00
DJ Lucas 88d6dc7f8c help2man: revert update (requires full perl environment) 2020-03-07 22:55:16 -06:00
DJ Lucas fa868f361b make-ca,CHANGELOG: post release version bump 2020-03-07 22:46:04 -06:00
DJ Lucas 30f31a14f7 CHANGLOG: Add note about new help2man 2020-03-07 22:41:51 -06:00
DJ Lucas f7a455a6b8 CHANGELOG: Typo 2020-03-07 22:40:11 -06:00
DJ Lucas 892378ecbe make-ca, include.h2m: Add detailed dependncy info and add note about configuration file 2020-03-07 22:37:27 -06:00
DJ Lucas 81786ef1c1 README: include prerequisites 2020-03-07 20:46:09 -06:00
DJ Lucas 11fa4267cd Update changelog. 2020-02-05 20:43:34 -06:00
DJ Lucas c3b3a65eb1 Merge pull request #7 from xry111/makedep 
Makefile: add dependency so "make install" won't need -j1
 2020-02-05 19:01:14 -06:00
DJ Lucas 294389bfc4 make-ca: post release version bump 2019-09-10 22:19:12 -05:00
DJ Lucas 55a5f39c5a CHANGELOG: Add entry for previous change. 2019-09-10 22:15:30 -05:00
DJ Lucas aa68b77848 Merge pull request #3 from knusbaum/master 
make-ca: Allow generation of certs in DESTDIR.
 2019-09-04 19:36:15 -05:00
DJ Lucas fb36653128 README: add note about distribuion. 2019-09-04 19:34:44 -05:00
DJ Lucas 8b63f49f2b Post release version bump. 2019-04-13 00:13:32 -05:00
DJ Lucas c7728786b8 Revert change to use /usr/bin/update-ca-certifiates for systemd service 2019-04-13 00:06:14 -05:00
DJ Lucas 5f9c836053 Redirect errors in copy-trust-modifications script 
Use update-ca-certificates for systemd service
 2019-04-12 23:11:01 -05:00
DJ Lucas b616663f62 Update README 2019-04-12 22:53:30 -05:00
DJ Lucas 4b171eb701 Fix syntax error in check_arg() function 2019-04-12 22:32:02 -05:00
DJ Lucas 31e66e0c74 Remove unused variables saarg, csarg, and smarg in get_trust_values() function 
Remove unused CERTLIST variable in copy-trust-modifications
Correct STDERR redirection in multiple functions
 2019-04-12 22:20:20 -05:00
DJ Lucas ddad9bbee0 Added write_nss_db() and write_java_p12() functions 2019-01-05 19:16:07 -06:00
DJ Lucas a2b5c44153 Update README 2019-01-04 21:35:03 -06:00
DJ Lucas 1f668ec233 Fix filename 2019-01-01 20:16:40 -06:00
DJ Lucas 73c979f2b8 Update README and minor text modification 2019-01-01 20:09:21 -06:00
DJ Lucas 30fc33d7fe Changed default name of anchors list to use md5sums extension 
Added copy-trust-modifcations script for use by p11-kit
 2019-01-01 20:00:04 -06:00
DJ Lucas 7e305de608 Fix certificate label in local certificates 2019-01-01 19:35:19 -06:00
DJ Lucas 6832ac11b8 Added get_trust_values(), get_p11_trust(), and write_anchor() functions to eliminate duplicate code 2019-01-01 14:35:23 -06:00
DJ Lucas 5316943b46 Use md5sum values for anchors.txt to detect p11-kit changes 
Added get_p11_label function to get reliable label values
 2019-01-01 14:08:35 -06:00
DJ Lucas 33cdab2a45 Add anchorlist for use by p11-kit to utilize LOCALDIR 2018-12-28 00:41:01 -06:00
DJ Lucas 2526d6b813 Fix assignment of make-ca.conf 2018-12-01 17:26:26 -06:00
DJ Lucas a3a5711466 Allow definition of configuratino file and install default configuration file. 2018-12-01 17:21:37 -06:00
DJ Lucas b8603c3856 Perform system installation of update service files 
Separate installation step for other consumers
- Partial merge of PR from Graham Weldon
 2018-12-01 17:07:13 -06:00
DJ Lucas aa43bb31eb Add missing java change to CHANGELOG 2018-12-01 16:07:58 -06:00
DJ Lucas 5a06937b96 Fix typo 2018-12-01 16:05:08 -06:00
DJ Lucas ca103899f6 Move bundle defaults to /etc/pki/tls/certs/ 
Fix invalid test cases on command line processing
Remove -c/--cadir flags, replace with -b/--bindledir to store all bundles in same location
 2018-12-01 16:03:19 -06:00
DJ Lucas 21ec3212be clean up inadvertant website change 2018-12-01 12:25:54 -06:00
DJ Lucas 7fe19acbb1 Set theme jekyll-theme-slate 2018-12-01 12:21:13 -06:00
DJ Lucas d30386dc33 Fix help output for optional argument to -n 2018-09-04 22:44:07 -05:00
DJ Lucas 600de222bd minor logic fixes 2018-09-04 22:41:01 -05:00
DJ Lucas 98c0193bb5 Add back Java P12 certs (disabled by default) 
Disable NSSDB by default
 2018-09-04 22:19:40 -05:00
DJ Lucas 1aa966774d Fix changelog, compatibility symlink never went in, and will not 2018-09-03 01:02:16 -05:00
DJ Lucas 1477399b17 Put back creation of blank NSSDB 2018-09-03 01:01:28 -05:00
DJ Lucas d342d6f51a Fix accidental breakage of anchors 2018-09-03 00:57:28 -05:00
DJ Lucas eb574a7166 Properly update CHANGELOG. 2018-09-02 03:12:44 -05:00
DJ Lucas f311a2b9cb Actually depend on the network-onlne.target. 2018-09-02 03:11:54 -05:00
DJ Lucas 3d0431cd86 Added "Wants=network-online.target" to update-pki.service 2018-09-02 03:08:21 -05:00
DJ Lucas e0d9307489 Use p11-kit to generate alternate stores 2018-09-02 02:59:25 -05:00
DJ Lucas 486284c5ad Use 'openssl rehash' instead of 'c_rehash' 
Manual merge:
From 8fc206c2a9eb627dadc89c50f9c3b2992560130c Mon Sep 17 00:00:00 2001
From: Ken Moffat <zarniwhoop_AT_ntlworld_DOT_com>
Date: Thu, 5 Apr 2018 20:36:04 +0100
Subject: [PATCH] Change c_rehash to openssl rehash.
 2018-04-06 00:30:28 -05:00
DJ Lucas c7720cf468 Remove use of .old files/directories 
Fix argument for catrust/smtrust in java cacerts logic.
 2018-02-18 20:35:03 -06:00
DJ Lucas 0baf68696f Generate both PKCS#12 and JKS stores for Java 
Local certs keep out of band trust when copied to system certs
 2018-02-07 22:49:55 -06:00
DJ Lucas e29ccf19ac Allow use of proxy with OpenSSL s_client. 2017-10-14 00:07:58 -05:00
DJ Lucas 73bfc6b792 Bump to version 0.6. 
Really check revision before downloading.
 2017-10-13 23:43:57 -05:00
DJ Lucas ad038d1a46 Add uninstall and clean target, install systemd units 2017-09-30 02:40:10 -05:00
DJ Lucas ecdb27dff2 Add example systemd service and timer 2017-09-30 00:49:49 -05:00
DJ Lucas 63ca0511c9 Bumpt to v0.5 2017-09-27 18:23:51 -05:00
DJ Lucas 0a1cf833bf Bump to v0.4 2017-09-27 18:22:08 -05:00
DJ Lucas 3e5253e9f9 Add email and code signing single stores. 2017-09-27 00:32:19 -05:00
DJ Lucas 73d32415a1 bump CHANGELOG to 0.4 after quick followup release 2017-09-24 22:01:40 -05:00