CACKey
Check-in [acce3f42d5]
Login
HomeDownloadsSource CodeWiki
Overview
Comment:Removed extraneous CA
Downloads: Tarball | ZIP archive | SQL archive
Timelines: family | ancestors | descendants | both | piv
Files: files | file ages | folders
SHA1: acce3f42d55aff3fabd1597f26170175cd9ba340
User & Date: rkeene on 2013-01-15 19:03:29
Other Links: branch diff | manifest | tags
Context
2013-01-15
19:15
Added "Common Policy" root CA check-in: 69efc196d7 user: rkeene tags: piv
19:03
Removed extraneous CA check-in: acce3f42d5 user: rkeene tags: piv
18:48
Updated built-in certs, and added script to rebuild built-in certs check-in: 2c8ab6e8d0 user: rkeene tags: piv
Changes
Hide Diffs Side-by-Side Diffs Ignore Whitespace Patch

Modified build/certs/federal/Makefile from [cb6b7e3e05] to [b3e9bfcd30]. 

1
2
3

4
5
6
7
8
9
10

1
2

3
4
5
6
7
8
9
10



-
+








all: cert-1.crt CPCA_TRCA.crt
	grep -l 'Issuer: C=US, O=U.S. Government, OU=FPKI, CN=Federal Bridge CA' *.crt | xargs rm -f
	grep -l 'Subject: C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA' *.crt | xargs grep -l 'Issuer: C=US, O=U.S. Government, OU=Department of the Treasury, OU=Certification Authorities, OU=US Treasury Root CA' | xargs rm -f
	grep -l 'Subject: C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA' *.crt  | xargs grep -H 'Issuer:' | grep -v 'Issuer: C=us, O=U.S. Government, OU=FBCA, CN=Common Policy' | cut -f 1 -d : | xargs rm -f

CPCA_TRCA.crt:
	wget -O - --no-check-certificate https://pki.treas.gov/CPCA_TRCA.cer | openssl x509 -text > "$@.new"
	mv "$@.new" "$@"

caCertsIssuedTofcpca.p7c:
	wget -O "$@.new" http://http.fpki.gov/fcpca/caCertsIssuedTofcpca.p7c
︙

Powered by Fossil · RSS