Produced by Araxis Merge on 5/25/2018 9:21:43 AM Central Daylight Time. See www.araxis.com for information about Merge. This report uses XHTML and CSS2, and is best viewed with a modern standards-compliant browser. For optimum results when printing this report, use landscape orientation and enable printing of background images and colours in your browser.
| # | Location | File | Last Modified |
|---|---|---|---|
| 1 | C:\AraxisMergeCompare\Pri_un\ZIP\DSM-cif\Direct Implementation\java\install\build\download\apache-tomcat-6.0.37.tar\apache-tomcat-6.0.37\bin\tomcat-native.tar\tomcat-native\tomcat-native-1.1.27-src\jni\examples | mkcerts | Sat Oct 21 22:16:34 2006 UTC |
| 2 | C:\AraxisMergeCompare\Pri_re\ZIP\DSM-cif\Direct Implementation\java\install\build\download\apache-tomcat-6.0.37.tar\apache-tomcat-6.0.37\bin\tomcat-native.tar\tomcat-native\tomcat-native-1.1.27-src\jni\examples | mkcerts | Tue May 22 21:10:05 2018 UTC |
| Description | Between Files 1 and 2 |
|
|---|---|---|
| Text Blocks | Lines | |
| Unchanged | 5 | 418 |
| Changed | 4 | 14 |
| Inserted | 0 | 0 |
| Removed | 0 | 0 |
| Whitespace | |
|---|---|
| Character case | Differences in character case are significant |
| Line endings | Differences in line endings (CR and LF characters) are ignored |
| CR/LF characters | Not shown in the comparison detail |
No regular expressions were active.
| 1 | #!/bin/sh | |
| 2 | # | |
| 3 | # Licensed to the Ap ache Softw are Founda tion (ASF) under one or more | |
| 4 | # contribu tor licens e agreemen ts. See t he NOTICE file distr ibuted wit h | |
| 5 | # this wor k for addi tional inf ormation r egarding c opyright o wnership. | |
| 6 | # The ASF licenses t his file t o You unde r the Apac he License , Version 2.0 | |
| 7 | # (the "Li cense"); y ou may not use this file excep t in compl iance with | |
| 8 | # the Lice nse. You may obtain a copy of the Licen se at | |
| 9 | # | |
| 10 | # http ://www.apa che.org/li censes/LIC ENSE-2.0 | |
| 11 | # | |
| 12 | # Unless r equired by applicabl e law or a greed to i n writing, software | |
| 13 | # distribu ted under the Licens e is distr ibuted on an "AS IS" BASIS, | |
| 14 | # WITHOUT WARRANTIES OR CONDIT IONS OF AN Y KIND, ei ther expre ss or impl ied. | |
| 15 | # See the License fo r the spec ific langu age govern ing permis sions and | |
| 16 | # limitati ons under the Licens e. | |
| 17 | # | |
| 18 | # | |
| 19 | # This is the config uration fi le to trea te the CA certificat e of the | |
| 20 | # _DEMONST RATION ONL Y_ 'Coyote ' Certific ate Author ity. | |
| 21 | # This CA is used to sign the localhost. crt and us er.crt | |
| 22 | # because self-signe d server c ertificate s are not accepted b y all brow sers. | |
| 23 | # NEVER US E THIS CA YOURSELF F OR REAL LI FE! INSTEA D EITHER U SE A PUBLI CALLY | |
| 24 | # KNOWN CA OR CREATE YOUR OWN CA! | |
| 25 | ||
| 26 | if [ -z "$ OPENSSL" ] ; then OPE NSSL=opens sl; fi | |
| 27 | ||
| 28 | PASSPHRASE ="pass: PW " | |
| 29 | # Encrypt all keys | |
| 30 | GENRSA="$O PENSSL gen rsa -des3" | |
| 31 | # Uncommen t for no k ey encrypt ion | |
| 32 | # GENRSA=" $OPENSSL g enrsa" | |
| 33 | REQ="$OPEN SSL req -n ew" | |
| 34 | CA="$OPENS SL ca" | |
| 35 | X509="$OPE NSSL x509" | |
| 36 | ||
| 37 | $OPENSSL r and -out . rnd 8192 | |
| 38 | $GENRSA -p assout $PA SSPHRASE - out ca.key -rand .rn d 1024 | |
| 39 | ||
| 40 | cat >ca.cf g <<EOT | |
| 41 | [ ca ] | |
| 42 | default_ca = defaul t_db | |
| 43 | [ default_ db ] | |
| 44 | dir = . | |
| 45 | certs = . | |
| 46 | new_certs_ dir = ca.cer ts | |
| 47 | database = ca.ind ex | |
| 48 | serial = ca.ser ial | |
| 49 | RANDFILE = .rnd | |
| 50 | certificat e = ca.crt | |
| 51 | private_ke y = ca.key | |
| 52 | default_da ys = 365 | |
| 53 | default_cr l_days = 30 | |
| 54 | default_md = md5 | |
| 55 | preserve = no | |
| 56 | name_opt = ca_def ault | |
| 57 | cert_opt = ca_def ault | |
| 58 | unique_sub ject = no | |
| 59 | [ server_p olicy ] | |
| 60 | countryNam e = suppli ed | |
| 61 | stateOrPro vinceName = suppli ed | |
| 62 | localityNa me = suppli ed | |
| 63 | organizati onName = suppli ed | |
| 64 | organizati onalUnitNa me = suppli ed | |
| 65 | commonName = suppli ed | |
| 66 | emailAddre ss = suppli ed | |
| 67 | [ server_c ert ] | |
| 68 | subjectKey Identifier = hash | |
| 69 | authorityK eyIdentifi er = keyid: always | |
| 70 | extendedKe yUsage = server Auth,clien tAuth,msSG C,nsSGC | |
| 71 | basicConst raints = critic al,CA:fals e | |
| 72 | [ user_pol icy ] | |
| 73 | commonName = suppli ed | |
| 74 | emailAddre ss = suppli ed | |
| 75 | [ user_cer t ] | |
| 76 | subjectAlt Name = email: copy | |
| 77 | basicConst raints = critic al,CA:fals e | |
| 78 | authorityK eyIdentifi er = keyid: always | |
| 79 | extendedKe yUsage = client Auth,email Protection | |
| 80 | ||
| 81 | [ req ] | |
| 82 | default_bi ts = 1024 | |
| 83 | default_ke yfile = ca.key | |
| 84 | distinguis hed_name = defaul t_ca | |
| 85 | x509_exten sions = extens ions | |
| 86 | string_mas k = nombst r | |
| 87 | req_extens ions = req_ex tensions | |
| 88 | input_pass word = PW | |
| 89 | output_pas sword = PW | |
| 90 | [ default_ ca ] | |
| 91 | countryNam e = Countr y Code | |
| 92 | countryNam e_value = US | |
| 93 | countryNam e_min = 2 | |
| 94 | countryNam e_max = 2 | |
| 95 | stateOrPro vinceName = State Name | |
| 96 | stateOrPro vinceName_ value = Delawa re | |
| 97 | localityNa me = Locali ty Name | |
| 98 | localityNa me_value = Wilmin gton | |
| 99 | organizati onName = Organi zation Nam e | |
| 100 | organizati onName_val ue = Apache Software Foundation | |
| 101 | organizati onalUnitNa me = Organi zational U nit Name | |
| 102 | organizati onalUnitNa me_value = Apache Tomcat | |
| 103 | commonName = Common Name | |
| 104 | commonName _value = Apache Tomcat de mo root CA | |
| 105 | commonName _max = 64 | |
| 106 | emailAddre ss = Email Address | |
| 107 | emailAddre ss_value = coyote @tomcat.ap ache.org | |
| 108 | emailAddre ss_max = 40 | |
| 109 | [ extensio ns ] | |
| 110 | subjectKey Identifier = hash | |
| 111 | authorityK eyIdentifi er = keyid: always | |
| 112 | basicConst raints = critic al,CA:true | |
| 113 | [ req_exte nsions ] | |
| 114 | nsCertType = objsig n,email,se rver | |
| 115 | EOT | |
| 116 | ||
| 117 | $REQ -x509 -days 365 0 -batch - config ca. cfg -key c a.key -out ca.crt | |
| 118 | ||
| 119 | # Create c abundle.cr t that can be used f or CAfile | |
| 120 | cat >cabun dle.crt << EOT | |
| 121 | Tomcat Dem o Root CA | |
| 122 | ========== ========== ========== ========== = | |
| 123 | `$X509 -no out -finge rprint -in ca.crt` | |
| 124 | PEM Data: | |
| 125 | `$X509 -in ca.crt` | |
| 126 | `$X509 -no out -text -in ca.crt ` | |
| 127 | EOT | |
| 128 | ||
| 129 | $GENRSA -p assout $PA SSPHRASE - out localh ost.key - rand .rnd 1024 | |
| 130 | ||
| 131 | cat >local host.cfg < <EOT | |
| 132 | [ req ] | |
| 133 | default_bi ts = 1024 | |
| 134 | distinguis hed_name = localh ost | |
| 135 | string_mas k = nombst r | |
| 136 | req_extens ions = extens ions | |
| 137 | input_pass word = PW | |
| 138 | output_pas sword = PW | |
| 139 | [ localhos t ] | |
| 140 | countryNam e = Countr y Code | |
| 141 | countryNam e_value = US | |
| 142 | countryNam e_min = 2 | |
| 143 | countryNam e_max = 2 | |
| 144 | stateOrPro vinceName = State Name | |
| 145 | stateOrPro vinceName_ value = Delawa re | |
| 146 | localityNa me = Locali ty Name | |
| 147 | localityNa me_value = Wilmin gton | |
| 148 | organizati onName = Organi zation Nam e | |
| 149 | organizati onName_val ue = Apache Software Foundation | |
| 150 | organizati onalUnitNa me = Organi zational U nit Name | |
| 151 | organizati onalUnitNa me_value = Apache Tomcat | |
| 152 | commonName = Common Name | |
| 153 | commonName _value = Apache Tomcat lo calhost se cure demo server | |
| 154 | commonName _max = 64 | |
| 155 | emailAddre ss = Email Address | |
| 156 | emailAddre ss_value = tomcat @localhost .edu | |
| 157 | emailAddre ss_max = 40 | |
| 158 | [ extensio ns ] | |
| 159 | nsCertType = server | |
| 160 | basicConst raints = critic al,CA:fals e | |
| 161 | EOT | |
| 162 | ||
| 163 | $REQ -pass in $PASSPH RASE -batc h -config localhost. cfg -key l ocalhost.k ey -out lo calhost.cs r | |
| 164 | rm -f loca lhost.cfg | |
| 165 | ||
| 166 | # make su re environ ment exist s | |
| 167 | if [ ! -d ca.certs ] ; then | |
| 168 | mkdir ca.certs | |
| 169 | echo ' 01' >ca.se rial | |
| 170 | cp /de v/null ca. index | |
| 171 | fi | |
| 172 | ||
| 173 | $CA -passi n $PASSPHR ASE -batch -config c a.cfg -ext ensions se rver_cert -policy se rver_polic y -out x. crt -infil es localho st.csr | |
| 174 | $X509 -in x.crt -out localhost .crt | |
| 175 | rm -f x.cr t | |
| 176 | # Create P KCS12 loca lhost cert ificate | |
| 177 | $OPENSSL p kcs12 -exp ort -passo ut $PASSPH RASE -pass in $PASSPH RASE -in l ocalhost.c rt -inkey localhost. key -certf ile ca.crt -out loca lhost.p12 | |
| 178 | ||
| 179 | $GENRSA -p assout $PA SSPHRASE - out user.k ey -rand . rnd 1024 | |
| 180 | ||
| 181 | cat >user. cfg <<EOT | |
| 182 | [ req ] | |
| 183 | default_bi ts = 1024 | |
| 184 | distinguis hed_name = admi n | |
| 185 | string_mas k = nomb str | |
| 186 | req_extens ions = exte nsions | |
| 187 | input_pass word = PW | |
| 188 | output_pas sword = PW | |
| 189 | [ admin ] | |
| 190 | commonName = User Name | |
| 191 | commonName _value = Loca lhost Admi nistrator | |
| 192 | commonName _max = 64 | |
| 193 | emailAddre ss = Emai l Address | |
| 194 | emailAddre ss_value = admi n@localhos t.edu | |
| 195 | emailAddre ss_max = 40 | |
| 196 | [ extensio ns ] | |
| 197 | nsCertType = clie nt,email | |
| 198 | basicConst raints = crit ical,CA:fa lse | |
| 199 | EOT | |
| 200 | ||
| 201 | $REQ -pass in $PASSPH RASE -batc h -config user.cfg - key user.k ey -out us er.csr | |
| 202 | rm -f user .cfg | |
| 203 | $CA -passi n $PASSPHR ASE -batch -config c a.cfg -ext ensions us er_cert -p olicy user _policy - out x.crt -infiles u ser.csr | |
| 204 | $X509 -in x.crt -out user.crt | |
| 205 | rm -f x.cr t | |
| 206 | ||
| 207 | # $OPENSSL verify -C Afile ca.c rt localho st.crt | |
| 208 | # $OPENSSL verify -C Afile ca.c rt user.cr t | |
| 209 | ||
| 210 | # Create P KCS12 user certifica te | |
| 211 | $OPENSSL p kcs12 -exp ort -passo ut $PASSPH RASE -pass in $PASSPH RASE -in u ser.crt -i nkey user. key -certf ile ca.crt -out user .p12 | |
| 212 | ||
| 213 | rm -f ca.c fg | |
| 214 | rm -f *.ol d | |
| 215 | rm -f ca.i ndex.attr | |
| 216 | rm -f .rnd |
Araxis Merge (but not the data content of this report) is Copyright © 1993-2016 Araxis Ltd (www.araxis.com). All rights reserved.