Mercurial > trustbridge
changeset 1375:341f79090de2
Notes about using a different certificate for codesigning
author | Andre Heinecke <andre.heinecke@intevation.de> |
---|---|
date | Thu, 04 Dec 2014 13:19:11 +0100 |
parents | 1bf288d17857 |
children | fdef94da2d70 |
files | ui/tests/data/NOTES |
diffstat | 1 files changed, 29 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/ui/tests/data/NOTES Mon Nov 24 16:46:21 2014 +0100 +++ b/ui/tests/data/NOTES Thu Dec 04 13:19:11 2014 +0100 @@ -184,3 +184,32 @@ screen -R server /home/intevation/hiawatha-prefix/sbin/hiawatha -d + + +# Bestimmten schlüssel für codesigning verwenden: + cd ui/tests/data/codesign +# Auch angenommen das er unter codesigning.key abgelegt ist ansonsten +# muss man noch in der Test CMakeList und den Buildscripten zur signatur +# den Pfad ändern. + +# Request mit externem schluessel + cert_req filename=codesigning.key output_file=codesigning-ext.csr \ + subject_name="CN=TrustBridge codesigning ext test,O=Do not trust this,C=DE" \ + key_usage=digital_signature \ + ns_cert_type=object_signing + +# Sign it: + cert_write request_file=codesigning-ext.csr issuer_crt=codesigning_root.pem \ + issuer_key=codesigning_root.key output_file=codesigning.pem \ + not_before=20130101000000 not_after=20151231235959 \ + key_usage=digital_signature \ + ns_cert_type=object_signing + + cat codesigning.pem codesigning-ext.key > codesigning-combined.pem + + common/pubkey-test.pem anpassen mit ensprechendem zertifikat. + --> Reinkopieren und markieren(inklusive begin und end zeile): :!wc + --> Als size eintragen + --> :'<,'>s/^/"/ + --> :'<,'>s/$/\\n"/ + --> make && make test