From b595e006ed516fc42a245864db564ba73e93b0c4 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Tue, 22 Apr 2008 21:29:39 +0000 Subject: Add SKI and AKI when issuing BSC EE cert svn path=/rpkid/testbed.py; revision=1695 --- rpkid/testbed.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rpkid/testbed.py b/rpkid/testbed.py index 75abcc69..8d3e86c0 100644 --- a/rpkid/testbed.py +++ b/rpkid/testbed.py @@ -610,7 +610,8 @@ class allocation(object): self.bsc_id = pdu.bsc_id rpki.log.info("Issuing BSC EE cert for %s" % self.name) - cmd = (prog_openssl, "x509", "-req", "-CA", self.name + "-RPKI-CA.cer", "-CAkey", self.name + "-RPKI-CA.key", "-CAserial", self.name + "-RPKI-CA.srl") + cmd = (prog_openssl, "x509", "-req", "-CA", self.name + "-RPKI-CA.cer", "-CAkey", self.name + "-RPKI-CA.key", "-CAserial", self.name + "-RPKI-CA.srl", + "-extfile", self.name + "-RPKI-EE.cnf", "-extensions", "req_x509_ext") signer = subprocess.Popen(cmd, stdin = subprocess.PIPE, stdout = subprocess.PIPE, stderr = subprocess.PIPE) bsc_ee = rpki.x509.X509(PEM = signer.communicate(input = pdu.pkcs10_request.get_PEM())[0]) -- cgit v1.2.3