cyassl/cyassl — pull request #100 by kaleb-himes (2014-07-15 21:34:51+00:00)
Title: automated the certificate renewal process

1. Gave us our own cyassl_global.cnf that can be modified as needed so we're not changing the default openssl.cnf.

2. Gave us a cyassl.cnf for end user, human readable output when certs are generated.

3. All certificate generations and updates now take place inside the working cyassl directory.
4. Simply editing line 45 of cyassl_global.cnf will make this possible.

5. Automatically update ca-cert.pem, client-cert.pem, server-cert.pem, server-ecc-cert.pem, pipe the correct arguments and automatically generate .der files.

6. Will automatically set up the file system and clean-up the file system when complete.

7. Unfortunately we have to add crlnumber as a permanant file in cyassl/certs/crl as I could not automatically edit this to put "01" in from the bash script.

8. ntru-cert.pem method incomplete, have not figured out the proper way of updating that cert, will push when passing all tests.

9. simply run ./renewcerts.sh from the certs directory (you may have to "chmod 755 renewcerts.sh" first)