changeset 1375:341f79090de2

Notes about using a different certificate for codesigning
author Andre Heinecke <andre.heinecke@intevation.de>
date Thu, 04 Dec 2014 13:19:11 +0100
parents 1bf288d17857
children fdef94da2d70
files ui/tests/data/NOTES
diffstat 1 files changed, 29 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/ui/tests/data/NOTES	Mon Nov 24 16:46:21 2014 +0100
+++ b/ui/tests/data/NOTES	Thu Dec 04 13:19:11 2014 +0100
@@ -184,3 +184,32 @@
 
     screen -R server
     /home/intevation/hiawatha-prefix/sbin/hiawatha -d
+
+
+# Bestimmten schlüssel für codesigning verwenden:
+    cd ui/tests/data/codesign
+# Auch angenommen das er unter codesigning.key abgelegt ist ansonsten
+# muss man noch in der Test CMakeList und den Buildscripten zur signatur
+# den Pfad ändern.
+
+# Request mit externem schluessel
+    cert_req filename=codesigning.key output_file=codesigning-ext.csr \
+    subject_name="CN=TrustBridge codesigning ext test,O=Do not trust this,C=DE" \
+    key_usage=digital_signature \
+    ns_cert_type=object_signing
+
+# Sign it:
+    cert_write request_file=codesigning-ext.csr issuer_crt=codesigning_root.pem \
+    issuer_key=codesigning_root.key output_file=codesigning.pem \
+    not_before=20130101000000 not_after=20151231235959 \
+    key_usage=digital_signature \
+    ns_cert_type=object_signing
+
+    cat codesigning.pem codesigning-ext.key > codesigning-combined.pem
+
+    common/pubkey-test.pem anpassen mit ensprechendem zertifikat.
+    --> Reinkopieren und markieren(inklusive begin und end zeile): :!wc
+    --> Als size eintragen
+    --> :'<,'>s/^/"/
+    --> :'<,'>s/$/\\n"/
+    --> make && make test

http://wald.intevation.org/projects/trustbridge/