Mercurial > trustbridge
comparison ui/tests/data/NOTES @ 1375:341f79090de2
Notes about using a different certificate for codesigning
| author | Andre Heinecke <andre.heinecke@intevation.de> |
|---|---|
| date | Thu, 04 Dec 2014 13:19:11 +0100 |
| parents | 4a3a482dc337 |
| children |
comparison
equal
deleted
inserted
replaced
| 1374:1bf288d17857 | 1375:341f79090de2 |
|---|---|
| 182 | 182 |
| 183 # Trustbridge download ordner nach /home/intevation/m13-files kopieren. | 183 # Trustbridge download ordner nach /home/intevation/m13-files kopieren. |
| 184 | 184 |
| 185 screen -R server | 185 screen -R server |
| 186 /home/intevation/hiawatha-prefix/sbin/hiawatha -d | 186 /home/intevation/hiawatha-prefix/sbin/hiawatha -d |
| 187 | |
| 188 | |
| 189 # Bestimmten schlüssel für codesigning verwenden: | |
| 190 cd ui/tests/data/codesign | |
| 191 # Auch angenommen das er unter codesigning.key abgelegt ist ansonsten | |
| 192 # muss man noch in der Test CMakeList und den Buildscripten zur signatur | |
| 193 # den Pfad ändern. | |
| 194 | |
| 195 # Request mit externem schluessel | |
| 196 cert_req filename=codesigning.key output_file=codesigning-ext.csr \ | |
| 197 subject_name="CN=TrustBridge codesigning ext test,O=Do not trust this,C=DE" \ | |
| 198 key_usage=digital_signature \ | |
| 199 ns_cert_type=object_signing | |
| 200 | |
| 201 # Sign it: | |
| 202 cert_write request_file=codesigning-ext.csr issuer_crt=codesigning_root.pem \ | |
| 203 issuer_key=codesigning_root.key output_file=codesigning.pem \ | |
| 204 not_before=20130101000000 not_after=20151231235959 \ | |
| 205 key_usage=digital_signature \ | |
| 206 ns_cert_type=object_signing | |
| 207 | |
| 208 cat codesigning.pem codesigning-ext.key > codesigning-combined.pem | |
| 209 | |
| 210 common/pubkey-test.pem anpassen mit ensprechendem zertifikat. | |
| 211 --> Reinkopieren und markieren(inklusive begin und end zeile): :!wc | |
| 212 --> Als size eintragen | |
| 213 --> :'<,'>s/^/"/ | |
| 214 --> :'<,'>s/$/\\n"/ | |
| 215 --> make && make test |