4 $ if f$getsyi("cpu") .ge. 128 then __arch := AXP
5 $ exe_dir := sys$disk:[-.'__arch'.exe.apps]
8 $ reqcmd := mcr 'exe_dir'openssl req
9 $ x509cmd := mcr 'exe_dir'openssl x509 'digest'
10 $ verifycmd := mcr 'exe_dir'openssl verify
12 $ CAkey="""keyCA.ss"""
13 $ CAcert="""certCA.ss"""
14 $ CAreq="""reqCA.ss"""
15 $ CAconf="""CAss.cnf"""
16 $ CAreq2="""req2CA.ss""" ! temp
21 $ Ucert="""certU.ss"""
24 $ write sys$output "make a certificate request using 'req'"
25 $ 'reqcmd' -config 'CAconf' -out 'CAreq' -keyout 'CAkey' -new ! -out err.ss
28 $ write sys$output "error using 'req' to generate a certificate request"
32 $ write sys$output "convert the certificate request into a self signed certificate using 'x509'"
33 $ define /user sys$output err.ss
34 $ 'x509cmd' "-CAcreateserial" -in 'CAreq' -days 30 -req -out 'CAcert' -signkey 'CAkey'
37 $ write sys$output "error using 'x509' to self sign a certificate request"
42 $ write sys$output "convert a certificate into a certificate request using 'x509'"
43 $ define /user sys$output err.ss
44 $ 'x509cmd' -in 'CAcert' -x509toreq -signkey 'CAkey' -out 'CAreq2'
47 $ write sys$output "error using 'x509' convert a certificate to a certificate request"
51 $ 'reqcmd' -verify -in 'CAreq' -noout
54 $ write sys$output "first generated request is invalid"
58 $ 'reqcmd' -verify -in 'CAreq2' -noout
61 $ write sys$output "second generated request is invalid"
65 $ 'verifycmd' "-CAfile" 'CAcert' 'CAcert'
68 $ write sys$output "first generated cert is invalid"
73 $ write sys$output "make another certificate request using 'req'"
74 $ define /user sys$output err.ss
75 $ 'reqcmd' -config 'Uconf' -out 'Ureq' -keyout 'Ukey' -new
78 $ write sys$output "error using 'req' to generate a certificate request"
83 $ write sys$output "sign certificate request with the just created CA via 'x509'"
84 $ define /user sys$output err.ss
85 $ 'x509cmd' "-CAcreateserial" -in 'Ureq' -days 30 -req -out 'Ucert' "-CA" 'CAcert' "-CAkey" 'CAkey'
88 $ write sys$output "error using 'x509' to sign a certificate request"
92 $ 'verifycmd' "-CAfile" 'CAcert' 'Ucert'
94 $ write sys$output "Certificate details"
95 $ 'x509cmd' -subject -issuer -startdate -enddate -noout -in 'Ucert'
98 $ write sys$output "The generated CA certificate is ",CAcert
99 $ write sys$output "The generated CA private key is ",CAkey
101 $ write sys$output "The generated user certificate is ",Ucert
102 $ write sys$output "The generated user private key is ",Ukey