Added the user certificate to the proxy-proxy chain.
authorJohn White <John.White@cern.ch>
Fri, 3 Jun 2005 12:48:59 +0000 (12:48 +0000)
committerJohn White <John.White@cern.ch>
Fri, 3 Jun 2005 12:48:59 +0000 (12:48 +0000)
bin/generate-test-certificates.sh

index 0b71879..a501e7f 100755 (executable)
@@ -224,8 +224,12 @@ function create_cert_proxy_proxy {
     openssl rsa -in ${X509_PROX_KEY} -passin pass:${PASSWORD} >> ${X509_PROX_GRID}
     
     # Now add the original certificate used to sign the request to the proxy file.
-    # This should be the certificate issued by the CA to the 'user'.
+    # In this case it is the proxy certificate!
     openssl x509 -in ${X509_SIGNING_CERT} >> ${X509_PROX_GRID}
+
+    # adding in the original certificate to the chain. 03/06/05
+    openssl x509 -in ${filebase}.cert >> ${X509_PROX_GRID}
+
     chmod 600 ${X509_PROX_GRID}
 
     cp ${CA_DIR}/serial_proxy.txt ${CA_DIR}/serial.txt