summaryrefslogtreecommitdiff
path: root/src/crypt_chain.cc
diff options
context:
space:
mode:
authorCarl Hetherington <cth@carlh.net>2013-09-19 14:15:31 +0100
committerCarl Hetherington <cth@carlh.net>2013-09-19 14:15:31 +0100
commit1c24485f58cdb133477b4e1e201ba0acd93ac74e (patch)
treeb3885ecbed9f0a64219beaad7436480f8b863e86 /src/crypt_chain.cc
parent452144160eb864984121d3fa883a12d40fbf7e47 (diff)
Rename crypt_chain -> signer_chain.
Diffstat (limited to 'src/crypt_chain.cc')
-rw-r--r--src/crypt_chain.cc168
1 files changed, 0 insertions, 168 deletions
diff --git a/src/crypt_chain.cc b/src/crypt_chain.cc
deleted file mode 100644
index 2737f12c..00000000
--- a/src/crypt_chain.cc
+++ /dev/null
@@ -1,168 +0,0 @@
-/*
- Copyright (C) 2013 Carl Hetherington <cth@carlh.net>
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-
-*/
-
-#include <fstream>
-#include <sstream>
-#include <boost/filesystem.hpp>
-#include <boost/algorithm/string.hpp>
-#include "crypt_chain.h"
-#include "exceptions.h"
-
-using std::string;
-using std::ofstream;
-using std::ifstream;
-using std::stringstream;
-using std::cout;
-
-static void command (char const * c)
-{
- int const r = system (c);
-#ifdef LIBDCP_WINDOWS
- if (r) {
-#else
- if (WEXITSTATUS (r)) {
-#endif
- stringstream s;
- s << "error in " << c << "\n";
- throw libdcp::MiscError (s.str());
- }
-}
-
-void
-libdcp::make_crypt_chain (boost::filesystem::path directory)
-{
- boost::filesystem::path const cwd = boost::filesystem::current_path ();
-
- boost::filesystem::current_path (directory);
- command ("openssl genrsa -out ca.key 2048");
-
- {
- ofstream f ("ca.cnf");
- f << "[ req ]\n"
- << "distinguished_name = req_distinguished_name\n"
- << "x509_extensions = v3_ca\n"
- << "[ v3_ca ]\n"
- << "basicConstraints = critical,CA:true,pathlen:3\n"
- << "keyUsage = keyCertSign,cRLSign\n"
- << "subjectKeyIdentifier = hash\n"
- << "authorityKeyIdentifier = keyid:always,issuer:always\n"
- << "[ req_distinguished_name ]\n"
- << "O = Unique organization name\n"
- << "OU = Organization unit\n"
- << "CN = Entity and dnQualifier\n";
- }
-
- command ("openssl rsa -outform PEM -pubout -in ca.key | openssl base64 -d | dd bs=1 skip=24 2>/dev/null | openssl sha1 -binary | openssl base64 > ca_dnq");
-
- string ca_dnq;
-
- {
- ifstream f ("ca_dnq");
- getline (f, ca_dnq);
- /* XXX: is this right? */
- boost::replace_all (ca_dnq, "/", "\\\\/");
- }
-
- string const ca_subject = "/O=example.org/OU=example.org/CN=.smpte-430-2.ROOT.NOT_FOR_PRODUCTION/dnQualifier=" + ca_dnq;
-
- {
- stringstream c;
- c << "openssl req -new -x509 -sha256 -config ca.cnf -days 3650 -set_serial 5 -subj " << ca_subject << " -key ca.key -outform PEM -out ca.self-signed.pem";
- command (c.str().c_str());
- }
-
- command ("openssl genrsa -out intermediate.key 2048");
-
- {
- ofstream f ("intermediate.cnf");
- f << "[ default ]\n"
- << "distinguished_name = req_distinguished_name\n"
- << "x509_extensions = v3_ca\n"
- << "[ v3_ca ]\n"
- << "basicConstraints = critical,CA:true,pathlen:2\n"
- << "keyUsage = keyCertSign,cRLSign\n"
- << "subjectKeyIdentifier = hash\n"
- << "authorityKeyIdentifier = keyid:always,issuer:always\n"
- << "[ req_distinguished_name ]\n"
- << "O = Unique organization name\n"
- << "OU = Organization unit\n"
- << "CN = Entity and dnQualifier\n";
- }
-
- command ("openssl rsa -outform PEM -pubout -in intermediate.key | openssl base64 -d | dd bs=1 skip=24 2>/dev/null | openssl sha1 -binary | openssl base64 > inter_dnq");
-
- string inter_dnq;
-
- {
- ifstream f ("inter_dnq");
- getline (f, inter_dnq);
- boost::replace_all (inter_dnq, "/", "\\\\/");
- }
-
- string const inter_subject = "/O=example.org/OU=example.org/CN=.smpte-430-2.INTERMEDIATE.NOT_FOR_PRODUCTION/dnQualifier=" + inter_dnq;
-
- {
- stringstream s;
- s << "openssl req -new -config intermediate.cnf -days 3649 -subj " << inter_subject << " -key intermediate.key -out intermediate.csr";
- command (s.str().c_str());
- }
-
-
- command ("openssl x509 -req -sha256 -days 3649 -CA ca.self-signed.pem -CAkey ca.key -set_serial 6 -in intermediate.csr -extfile intermediate.cnf -extensions v3_ca -out intermediate.signed.pem");
-
- command ("openssl genrsa -out leaf.key 2048");
-
- {
- ofstream f ("leaf.cnf");
- f << "[ default ]\n"
- << "distinguished_name = req_distinguished_name\n"
- << "x509_extensions = v3_ca\n"
- << "[ v3_ca ]\n"
- << "basicConstraints = critical,CA:false\n"
- << "keyUsage = digitalSignature,keyEncipherment\n"
- << "subjectKeyIdentifier = hash\n"
- << "authorityKeyIdentifier = keyid,issuer:always\n"
- << "[ req_distinguished_name ]\n"
- << "O = Unique organization name\n"
- << "OU = Organization unit\n"
- << "CN = Entity and dnQualifier\n";
- }
-
- command ("openssl rsa -outform PEM -pubout -in leaf.key | openssl base64 -d | dd bs=1 skip=24 2>/dev/null | openssl sha1 -binary | openssl base64 > leaf_dnq");
-
- string leaf_dnq;
-
- {
- ifstream f ("leaf_dnq");
- getline (f, leaf_dnq);
- boost::replace_all (leaf_dnq, "/", "\\\\/");
- }
-
- string const leaf_subject = "/O=example.org/OU=example.org/CN=CS.smpte-430-2.LEAF.NOT_FOR_PRODUCTION/dnQualifier=" + leaf_dnq;
-
- {
- stringstream s;
- s << "openssl req -new -config leaf.cnf -days 3648 -subj " << leaf_subject << " -key leaf.key -outform PEM -out leaf.csr";
- command (s.str().c_str());
- }
-
- command ("openssl x509 -req -sha256 -days 3648 -CA intermediate.signed.pem -CAkey intermediate.key -set_serial 7 -in leaf.csr -extfile leaf.cnf -extensions v3_ca -out leaf.signed.pem");
-
- boost::filesystem::current_path (cwd);
-}