@@ -94,8 +94,7 @@ generate_server_certs() {
9494generate_client_certs () {
9595 CLIENT_DIRECTORY=$1
9696 CLIENT_CERTIFICATE=${CLIENT_DIRECTORY} /client_cert.pem
97- CLIENT_CSR=${CLIENT_DIRECTORY} /client_cert.csr
98- CLIENT_PRIV_KEY=${CLIENT_DIRECTORY} /client_priv_key.pem
97+ CLIENT_CSR=${CLIENT_DIRECTORY} /parsec_cert.csr
9998
10099 CA_DIRECTORY=$2
101100 CA_CERTIFICATE=${CA_DIRECTORY} /ca_cert.pem
@@ -105,24 +104,9 @@ generate_client_certs() {
105104 mkdir -p " ${CLIENT_DIRECTORY} " > /dev/null 2>&1
106105 chmod 700 " ${CLIENT_DIRECTORY} "
107106
108- # Generate private key
109- openssl genrsa -out " ${CLIENT_PRIV_KEY} " 2048 > /dev/null 2>&1
110- if [ $? -ne 0 ]; then
111- echo " FAILED TO GENERATE KEY"
112- exit 1
113- fi
114-
115107 # Generate certificate request
116- openssl req -new \
117- -key " ${CLIENT_PRIV_KEY} " \
118- -out " ${CLIENT_CSR} " \
119- -subj " /C=UK/ST=Parsec /L=Parsec/O=Parsec/CN=parsec_client.com" > /dev/null 2>&1
120- if [ $? -ne 0 ]; then
121- echo " FAILED TO GENERATE CERTIFICATE REQUEST"
122- exit 1
123- fi
108+ parsec-tool create-csr --cn parsec_client.com --l Parsec --c UK --st Parsec --o Parsec --key-name $3 > parsec_cert.pem
124109
125- # Generate certificate
126110 openssl x509 -req -days 1000 -in " ${CLIENT_CSR} " \
127111 -CA " ${CA_CERTIFICATE} " -CAkey " ${CA_PRIV_KEY} " \
128112 -CAcreateserial -out " ${CLIENT_CERTIFICATE} " > /dev/null 2>&1
@@ -144,7 +128,8 @@ echo -n "Generating server private key and certificate: "
144128generate_server_certs ./tls/server ./tls/ca
145129
146130echo -n " Generating client private key and certificate: "
147- generate_client_certs ./tls/client ./tls/ca
131+ generate_client_certs ./tls/client ./tls/ca PARSEC_TEST_RSA_KEY
132+ generate_client_certs ./tls/client ./tls/ca PARSEC_TEST_ECDSA_KEY
148133
149134echo -n " Generating fake certificate authority private key and certificate: "
150135generate_ca_certs ./tls/fake_ca
0 commit comments