IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-24 16:10:02 -06:00
Code Issues Packages Projects Releases Wiki Activity

CA-less tests: Use sequential certificate serial numbers

Browse Source 
When serial numbers were generated with $RANDOM, there
could be collisions.
Use sequential numbers instead.

Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
This commit is contained in:
Petr Viktorin 2014-01-23 13:08:04 +01:00
parent 13f3ba5eb0
commit 85b8d8d5ae
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ipatests/test_integration/scripts/caless-create-pki
View File

@ -5,6 +5,8 @@ profile_server=(-t ,, -v 12)
crl_path=${crl_path-$(readlink -f $dbdir)}
serial_number=0
gen_cert() {
local profile="$1" nick="$2" subject="$3" ca options pwfile noise csr crt
shift 3
@ -46,7 +48,8 @@ file://$crl_path/$ca.crl
n
n
EOF
certutil -C -d "$dbdir" -f "$pwfile" -m "$RANDOM" -i "$csr" -o "$crt" "${options[@]}" "$@"
serial_number=$(($serial_number+1))
certutil -C -d "$dbdir" -f "$pwfile" -m "$serial_number" -i "$csr" -o "$crt" "${options[@]}" "$@"
certutil -A -d "$dbdir" -n "$nick" -f "$pwfile" -i "$crt" "${options[@]}"
rm -f "$pwfile" "$noise" "$csr" "$crt"