e21e1846a7
Thu Sep 21 2000 Nalin Dahyabhai <nalin@redhat.com>
- tweak the makefile some more
- disable MD2 support
- disable MDC2 support
- tweak the makefile
- rework certificate makefile to have the right parts for Apache
- strip binaries and libraries
- enable actual RSA support
- use /usr/bin/perl instead of /usr/bin/perl
- move the passwd.1 man page out of the passwd package's way
- update to 0.9.5a, modified for U.S.
- add perl as a build-time requirement
- disable RC5, IDEA support
- break out python extensions
- byte-compile python extensions without the build-root
- adjust the makefile to not remove temporary files (like .key files when
building .csr files)
- fix the building of python modules without openssl-devel already
installed
Wed Mar 01 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- Bero told me to move the Makefile into this package
Wed Mar 01 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- add lib*.so symlinks to link dynamically against shared libs
Tue Feb 29 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- update to 0.9.5
- run ldconfig directly in post/postun
- add FAQ
Sat Dec 18 1999 Bernhard Rosenkränzer <bero@redhat.de>
- Fix build on non-x86 platforms
Fri Nov 12 1999 Bernhard Rosenkränzer <bero@redhat.de>
- move /usr/share/ssl/* from -devel to main package
Tue Oct 26 1999 Bernhard Rosenkränzer <bero@redhat.de>
- inital packaging
- changes from base:
- Move /usr/local/ssl to /usr/share/ssl for FHS compliance
- handle RPM_OPT_FLAGS
66 lines
1.8 KiB
Makefile
66 lines
1.8 KiB
Makefile
.PHONY: usage
|
|
.SUFFIXES: .key .csr .crt .pem
|
|
.PRECIOUS: %.key %.csr %.crt %.pem
|
|
|
|
usage:
|
|
@echo "This makefile allows you to create:"
|
|
@echo " o public/private key pairs"
|
|
@echo " o SSL certificate signing requests (CSRs)"
|
|
@echo " o self-signed SSL test certificates"
|
|
@echo
|
|
@echo "To create a key pair, run \"make SOMETHING.key\"."
|
|
@echo "To create a CSR, run \"make SOMETHING.csr\"."
|
|
@echo "To create a test certificate, run \"make SOMETHING.crt\"."
|
|
@echo "To create a key and a test certificate in one file, run \"make SOMETHING.pem\"."
|
|
@echo
|
|
@echo "To create a key for use with Apache, run \"make genkey\"."
|
|
@echo "To create a CSR for use with Apache, run \"make certreq\"."
|
|
@echo "To create a test certificate for use with Apache, run \"make testcert\"."
|
|
@echo
|
|
@echo Examples:
|
|
@echo " make server.key"
|
|
@echo " make server.csr"
|
|
@echo " make server.crt"
|
|
@echo " make stunnel.pem"
|
|
@echo " make genkey"
|
|
@echo " make certreq"
|
|
@echo " make testcert"
|
|
|
|
%.pem:
|
|
umask 77 ; \
|
|
PEM1=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
|
|
PEM2=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
|
|
/usr/bin/openssl req -newkey rsa:1024 -keyout $$PEM1 -nodes -x509 -days 365 -out $$PEM2 ; \
|
|
cat $$PEM1 > $@ ; \
|
|
echo "" >> $@ ; \
|
|
cat $$PEM2 >> $@ ; \
|
|
$(RM) $$PEM1 $$PEM2
|
|
|
|
%.key:
|
|
umask 77 ; \
|
|
/usr/bin/openssl genrsa -des3 1024 > $@
|
|
|
|
%.csr: %.key
|
|
umask 77 ; \
|
|
/usr/bin/openssl req -new -key $^ -out $@
|
|
|
|
%.crt: %.key
|
|
umask 77 ; \
|
|
/usr/bin/openssl req -new -key $^ -x509 -days 365 -out $@
|
|
|
|
KEY=/etc/httpd/conf/ssl.key/server.key
|
|
CSR=/etc/httpd/conf/ssl.csr/server.csr
|
|
CRT=/etc/httpd/conf/ssl.crt/server.crt
|
|
|
|
genkey: $(KEY)
|
|
certreq: $(CSR)
|
|
testcert: $(CRT)
|
|
|
|
$(CSR): $(KEY)
|
|
umask 77 ; \
|
|
/usr/bin/openssl req -new -key $(KEY) -out $(CSR)
|
|
|
|
$(CRT): $(KEY)
|
|
umask 77 ; \
|
|
/usr/bin/openssl req -new -key $(KEY) -x509 -days 365 -out $(CRT)
|