Add a -CAserial argument for signing the user cert request

This is just to make sure that option is tested on a Unix build.  This
option is already present in ms/testss.bat, so it's an easy steal.

Reviewed-by: Rich Salz <rsalz@openssl.org>

diff --git a/test/testss b/test/testss
index 3afeb1168d88ec9abb3a15d6168e8da20941425b..0f2f6dd5460fcdc2c23c204f83f6ab5125652ba4 100644 (file)
--- a/test/testss
+++ b/test/testss
@@ -9,6 +9,7 @@ OPENSSL_CONF=/dev/null ; export OPENSSL_CONF
 
 CAkey="keyCA.ss"
 CAcert="certCA.ss"
 
 CAkey="keyCA.ss"
 CAcert="certCA.ss"

+CAserial="certCA.srl"

 CAreq="reqCA.ss"
 CAconf="CAss.cnf"
 CAreq2="req2CA.ss"     # temp
 CAreq="reqCA.ss"
 CAconf="CAss.cnf"
 CAreq2="req2CA.ss"     # temp


@@ -61,7 +62,7 @@ echo make a user cert request
 $reqcmd -config $Uconf -out $Ureq -keyout $Ukey $req_new >err.ss || exit 1
 
 echo sign user cert request
 $reqcmd -config $Uconf -out $Ureq -keyout $Ukey $req_new >err.ss || exit 1
 
 echo sign user cert request

-$x509cmd -CAcreateserial -in $Ureq -days 30 -req -out $Ucert -CA $CAcert -CAkey $CAkey -extfile $Uconf -extensions v3_ee >err.ss || exit 1
+$x509cmd -CAcreateserial -in $Ureq -days 30 -req -out $Ucert -CA $CAcert -CAkey $CAkey -CAserial $CAserial -extfile $Uconf -extensions v3_ee >err.ss || exit 1

 $verifycmd -CAfile $CAcert $Ucert || exit 1
 
 echo Certificate details
 $verifycmd -CAfile $CAcert $Ucert || exit 1
 
 echo Certificate details