if [ x"`openssl version`" \< x"OpenSSL 1.0.0" ]; then
hash=$(openssl x509 -hash -noout -in $1-ca/$1.cert)
else
- hash=$(openssl x509 -subject_hash_old -noout -in $1-ca/$1.cert)
+ if [ ${USENEWHASH} == 'no' ]; then
+ hash=$(openssl x509 -subject_hash_old -noout -in $1-ca/$1.cert)
+ fi
fi
cp $1-ca/$1.cert grid-security/certificates/${hash}.0
cp $1-ca/$1.crl grid-security/certificates/${hash}.r0
VOMS='no'
# if we only show environmental settings
ONLYENV='no'
+USENEWHASH='no'
while true; do
case "$1" in
CATYPES='trusted'
shift
;;
+ -n|--new)
+ USENEWHASH='true'
+ shift
+ ;;
-e|--extra)
shift
EXTRACERTS=$1