Nach zweimal ./build-key client

diff --git a/keys/02.pem b/keys/02.pem
new file mode 100644 (file)
index 0000000..c108b7c
--- /dev/null
+++ b/keys/02.pem
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=DE, ST=Berlin, L=Berlin, O=Frank Brehm, CN=Frank Brehm CA/emailAddress=frank@brehm-online.com
+        Validity
+            Not Before: Jan 14 22:26:36 2012 GMT
+            Not After : Jan 11 22:26:36 2022 GMT
+        Subject: C=DE, ST=Berlin, L=Berlin, O=Frank Brehm, CN=debian-1/emailAddress=frank@brehm-online.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:de:66:9f:37:fc:d8:fb:c3:79:5d:23:11:5d:58:
+                    2a:f0:d5:91:7c:26:fd:36:28:22:09:ec:e7:38:b6:
+                    c9:cb:d5:b1:8a:e3:8f:06:da:65:cf:c5:c2:f4:87:
+                    58:e8:35:90:1b:b2:cc:ca:90:84:68:ae:7b:79:11:
+                    83:a9:fa:df:6f:27:bc:7c:2b:d2:ac:b2:64:31:eb:
+                    b8:bf:c7:64:95:32:af:6e:e9:6d:4e:a0:27:25:ed:
+                    b7:c3:6a:f9:d9:ec:4a:e7:44:7e:8d:7d:6b:b0:7e:
+                    ec:b6:c7:6b:ad:c7:19:09:85:7c:96:96:cd:48:a6:
+                    b4:00:51:23:4f:4b:ef:99:65
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                25:B3:D2:B0:E1:23:5C:85:01:8D:2D:81:09:DD:FD:49:7F:85:36:6E
+            X509v3 Authority Key Identifier: 
+                keyid:F9:3B:2C:48:BB:29:40:03:4A:91:20:2D:2B:45:86:5B:DB:EC:8A:5A
+                DirName:/C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=Frank Brehm CA/emailAddress=frank@brehm-online.com
+                serial:9A:E9:87:6B:50:A9:B3:CF
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha1WithRSAEncryption
+        2c:84:ef:b2:22:6b:91:d5:f1:28:9e:c5:d2:52:d1:c1:0c:42:
+        64:39:4d:b3:13:dd:48:78:5b:7c:14:42:53:e9:6c:94:1b:00:
+        b2:37:6c:1e:7c:94:c0:15:62:72:48:f4:e7:d4:a8:31:1d:d8:
+        e1:fd:60:c9:11:54:12:9f:30:e0:1c:cf:c8:64:12:80:53:76:
+        90:10:56:4b:db:0b:ad:e0:36:da:d8:78:63:57:b9:d6:65:fd:
+        8a:8b:0b:26:33:fc:20:c6:9c:ac:db:0a:ca:7d:a7:2d:67:c8:
+        66:a0:2e:b2:03:fc:59:09:f3:fa:e0:2a:ed:30:c0:09:63:d8:
+        18:85
+-----BEGIN CERTIFICATE-----
+MIIDuTCCAyKgAwIBAgIBAjANBgkqhkiG9w0BAQUFADCBhTELMAkGA1UEBhMCREUx
+DzANBgNVBAgTBkJlcmxpbjEPMA0GA1UEBxMGQmVybGluMRQwEgYDVQQKEwtGcmFu
+ayBCcmVobTEXMBUGA1UEAxMORnJhbmsgQnJlaG0gQ0ExJTAjBgkqhkiG9w0BCQEW
+FmZyYW5rQGJyZWhtLW9ubGluZS5jb20wHhcNMTIwMTE0MjIyNjM2WhcNMjIwMTEx
+MjIyNjM2WjB/MQswCQYDVQQGEwJERTEPMA0GA1UECBMGQmVybGluMQ8wDQYDVQQH
+EwZCZXJsaW4xFDASBgNVBAoTC0ZyYW5rIEJyZWhtMREwDwYDVQQDEwhkZWJpYW4t
+MTElMCMGCSqGSIb3DQEJARYWZnJhbmtAYnJlaG0tb25saW5lLmNvbTCBnzANBgkq
+hkiG9w0BAQEFAAOBjQAwgYkCgYEA3mafN/zY+8N5XSMRXVgq8NWRfCb9NigiCezn
+OLbJy9WxiuOPBtplz8XC9IdY6DWQG7LMypCEaK57eRGDqfrfbye8fCvSrLJkMeu4
+v8dklTKvbultTqAnJe23w2r52exK50R+jX1rsH7stsdrrccZCYV8lpbNSKa0AFEj
+T0vvmWUCAwEAAaOCATwwggE4MAkGA1UdEwQCMAAwLQYJYIZIAYb4QgENBCAWHkVh
+c3ktUlNBIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUJbPSsOEjXIUB
+jS2BCd39SX+FNm4wgboGA1UdIwSBsjCBr4AU+TssSLspQANKkSAtK0WGW9vsilqh
+gYukgYgwgYUxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4xDzANBgNVBAcT
+BkJlcmxpbjEUMBIGA1UEChMLRnJhbmsgQnJlaG0xFzAVBgNVBAMTDkZyYW5rIEJy
+ZWhtIENBMSUwIwYJKoZIhvcNAQkBFhZmcmFua0BicmVobS1vbmxpbmUuY29tggkA
+mumHa1Cps88wEwYDVR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMA0GCSqG
+SIb3DQEBBQUAA4GBACyE77Iia5HV8SiexdJS0cEMQmQ5TbMT3Uh4W3wUQlPpbJQb
+ALI3bB58lMAVYnJI9OfUqDEd2OH9YMkRVBKfMOAcz8hkEoBTdpAQVkvbC63gNtrY
+eGNXudZl/YqLCyYz/CDGnKzbCsp9py1nyGagLrID/FkJ8/rgKu0wwAlj2BiF
+-----END CERTIFICATE-----

diff --git a/keys/client.crt b/keys/client.crt
new file mode 100644 (file)
index 0000000..da89ce5
--- /dev/null
+++ b/keys/client.crt
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=DE, ST=Berlin, L=Berlin, O=Frank Brehm, CN=Frank Brehm CA/emailAddress=frank@brehm-online.com
+        Validity
+            Not Before: Jan 14 22:27:11 2012 GMT
+            Not After : Jan 11 22:27:11 2022 GMT
+        Subject: C=DE, ST=Berlin, L=Berlin, O=Frank Brehm, CN=debian-2/emailAddress=frank@brehm-online.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d5:4d:e4:1f:7d:42:12:85:79:b5:c8:ce:d6:e1:
+                    a9:d7:2a:7d:85:5c:86:d0:86:61:9d:c2:d1:f5:06:
+                    bf:7e:cc:ac:57:9c:5d:4d:90:f6:4a:20:0e:60:8a:
+                    d5:fd:9d:70:d7:2f:5e:9e:06:9e:0d:77:07:de:f3:
+                    09:d2:1b:96:99:bd:fc:7b:b0:bf:00:e6:ac:29:0e:
+                    be:9f:eb:26:b2:f6:92:64:3d:c6:9a:0a:a9:c4:05:
+                    01:ac:36:c3:de:6c:b5:2d:8c:ca:06:06:ab:af:75:
+                    3b:6e:40:02:70:4a:20:f3:64:62:6e:a7:a3:26:7e:
+                    ab:7a:31:26:0e:23:9c:42:71
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                Easy-RSA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                44:E4:79:0D:6F:ED:F3:7D:3F:0B:C9:81:CF:0C:37:18:83:29:F2:D5
+            X509v3 Authority Key Identifier: 
+                keyid:F9:3B:2C:48:BB:29:40:03:4A:91:20:2D:2B:45:86:5B:DB:EC:8A:5A
+                DirName:/C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=Frank Brehm CA/emailAddress=frank@brehm-online.com
+                serial:9A:E9:87:6B:50:A9:B3:CF
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha1WithRSAEncryption
+        2b:a0:28:6c:da:cf:0c:60:fc:25:b1:fb:34:24:59:b5:96:33:
+        0e:8b:9a:ef:62:3c:4d:28:41:00:63:25:ba:21:bc:f2:fe:24:
+        89:b7:52:ea:3c:e9:da:a4:b6:41:c4:7e:e1:1b:27:1b:db:d7:
+        b2:27:65:8f:ca:5b:c9:84:eb:a7:f5:79:70:78:bd:e0:6f:d7:
+        90:71:e3:51:af:9a:4d:22:17:da:ac:12:75:ab:c1:11:84:fe:
+        8a:ae:02:ab:f1:34:21:8e:ca:c3:8b:61:26:ed:3e:a3:67:53:
+        7f:f8:51:bc:8e:38:14:4a:94:27:68:fe:6d:53:9e:7d:f4:59:
+        11:01
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

diff --git a/keys/client.csr b/keys/client.csr
new file mode 100644 (file)
index 0000000..6ead8d5
--- /dev/null
+++ b/keys/client.csr
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBvzCCASgCAQAwfzELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJlcmxpbjEPMA0G
+A1UEBxMGQmVybGluMRQwEgYDVQQKEwtGcmFuayBCcmVobTERMA8GA1UEAxMIZGVi
+aWFuLTIxJTAjBgkqhkiG9w0BCQEWFmZyYW5rQGJyZWhtLW9ubGluZS5jb20wgZ8w
+DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANVN5B99QhKFebXIztbhqdcqfYVchtCG
+YZ3C0fUGv37MrFecXU2Q9kogDmCK1f2dcNcvXp4Gng13B97zCdIblpm9/HuwvwDm
+rCkOvp/rJrL2kmQ9xpoKqcQFAaw2w95stS2MygYGq691O25AAnBKIPNkYm6noyZ+
+q3oxJg4jnEJxAgMBAAGgADANBgkqhkiG9w0BAQUFAAOBgQB516fj6CAJ08BrwlBl
+TDJiSyrKOqRohK9OxOUz+MKV+zJ+6PFF0a/6okhjAdXBM/2QLjfFCUtm8p7eu2hD
+gmR7thygpTqqSE1jApCsZOsPiu1u3YKqnx4lsP3Cnv/6Xb7eZhFhH3Nw07DQSVzG
+s+jI6KCVNrMPmxHKLVCGcyVutQ==
+-----END CERTIFICATE REQUEST-----

diff --git a/keys/client.key b/keys/client.key
new file mode 100644 (file)
index 0000000..e5c9b95
--- /dev/null
+++ b/keys/client.key
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

diff --git a/keys/index.txt b/keys/index.txt
index 7e548e788c53e0d1746aa87d34a805eca9ae36be..e053b6e074fbd8afde08a4e4d5f393a799d746ef 100644 (file)
--- a/keys/index.txt
+++ b/keys/index.txt
@@ -1 +1,3 @@
 V      220111222432Z           01      unknown /C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=server/emailAddress=frank@brehm-online.com
+V      220111222636Z           02      unknown /C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=debian-1/emailAddress=frank@brehm-online.com
+V      220111222711Z           03      unknown /C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=debian-2/emailAddress=frank@brehm-online.com

diff --git a/keys/index.txt.attr.old b/keys/index.txt.attr.old
new file mode 100644 (file)
index 0000000..8f7e63a
--- /dev/null
+++ b/keys/index.txt.attr.old
@@ -0,0 +1 @@
+unique_subject = yes

diff --git a/keys/index.txt.old b/keys/index.txt.old
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..80e9b69f87a1efd53e5c7e51935e5bab6595d400 100644 (file)
--- a/keys/index.txt.old
+++ b/keys/index.txt.old
@@ -0,0 +1,2 @@
+V      220111222432Z           01      unknown /C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=server/emailAddress=frank@brehm-online.com
+V      220111222636Z           02      unknown /C=DE/ST=Berlin/L=Berlin/O=Frank Brehm/CN=debian-1/emailAddress=frank@brehm-online.com

diff --git a/keys/serial b/keys/serial
index 9e22bcb8e3440869e9e1303f3b7045d1fc8e58c5..64969239d5f72d674bbedc24eb0a155a59d0e607 100644 (file)
--- a/keys/serial
+++ b/keys/serial
@@ -1 +1 @@
-02
+04

diff --git a/keys/serial.old b/keys/serial.old
index 8a0f05e166aa61225bf6649cb345f87416b5f509..75016ea3625245b1aac79cc5586c3f33ce8b7c78 100644 (file)
--- a/keys/serial.old
+++ b/keys/serial.old
@@ -1 +1 @@
-01
+03