Change hte long validity to 5000 days as 10000 causes problems on some openssl versions
authorJoni Hahkala <joni.hahkala@cern.ch>
Mon, 21 Mar 2011 20:49:49 +0000 (20:49 +0000)
committerJoni Hahkala <joni.hahkala@cern.ch>
Mon, 21 Mar 2011 20:49:49 +0000 (20:49 +0000)
bin/generate-ca-certificates-for-cvs.sh
bin/generate-test-certificates.sh

index 751f8b0..6041dac 100755 (executable)
@@ -47,7 +47,7 @@ function create_ca {
         if [ "$catype" = "expired" ]; then
             DAYS='-days -1'
         else
-            DAYS='-days 10000'
+            DAYS='-days 5000'
         fi
 
         export CN="the $catype CA"
index 76784e9..bcc7037 100755 (executable)
@@ -393,7 +393,7 @@ function create_some {
     create_cert $CERT_DIR/${catype}_host "$HOSTNAME" server $DAYS
 
     # generating CRL
-    openssl ca -gencrl -crldays 10000 -out $CA_DIR/${catype}.crl -config $REQ_CONFIG_FILE
+    openssl ca -gencrl -crldays 5000 -out $CA_DIR/${catype}.crl -config $REQ_CONFIG_FILE
 
     add_ca_grid_sec ${catype}
 
@@ -698,7 +698,7 @@ function create_all {
 
     # create valid certs with proxies
 
-    PROXY_VALIDITY=10000
+    PROXY_VALIDITY=5000
        
     TYPE="client"
     CTYPE="client"
@@ -1148,7 +1148,7 @@ TARGETDIR=$1
 CONFIGDIR=$(cd $(dirname $0)/..; echo $PWD)/test
 
 PASSWORD='changeit'
-DAYS=10000
+DAYS=5000
 
 if [ -z "$TARGETDIR" ]; then
     echo "Please specify the destination directory!"