Módosítások

With this script, you can generate a certificate request that you can submit manually submit to Terena TCS service. For Hungary, you may use the following URL: http://www.ca.niif.hu/hu/ca_request It's possible to use include multiple SubjectAltName -s in the request, such as for <code>aai.niif.hu</code> and <code>www.aai.niif.hu</code>. {{NOTE_EN|Never share the private key (thus the certificate) across virtual hosts.}}

my $@opensslReqCmd=("openssl ","req ","-new ","-nodes ","-config ","$tmpfile ","-out $defaulthost.csr";my $opensslVerifyCmd=,"openssl req -text -in $defaulthost.csr");

&mkConfig#for re-key, you'd use:#if (-r "$tmpfiledefaulthost.key") { #push @opensslReqCmd,@hosts("-key","$defaulthost.key");#}

`$opensslReqCmd`;`chmod 600 my @opensslVerifyCmd=("openssl","req","-text","-in","$defaulthost.key`;system $opensslVerifyCmdcsr");

print "\nTo retrieve the issued certificate, please issue the following command:\n";print " env host=$defaulthost $dirname/$getcert\n"; unlink $tmpfile; sub &mkConfig(@) { my $out=shift; my tmpfile,@hosts=@_; my $defaulthost=$hosts[0]);

default_days = 1095# 3x365 daysdefault_md = sha1sha256

 # Extensions to add to a certificate request #basicConstraints = CA:FALSE#keyUsage = nonRepudiation, digitalSignature, keyEnciphermentsubjectAltName = \@alt_names

for (my $i=1; $i<=$#hosts+1; $i++) { print CONF "DNS." . $i . " = " . $hosts[$i-1] . "\n";