I could not find that utility, so I used a shell script that is *supposed* to 
do the same thing:

        #! /bin/sh

        if [ ! -d "$1" ]; then
            echo "Usage: $0 [FOLDER]" >&2
            exit 1
        fi
        for file in "$1"/*.pem; do 
                ln -s $file `openssl x509 -hash -noout -in $file`.0; 
        done

I ended up with a couple of symbolic links in the folder:

lrwxrwxrwx. 1 root root  28 Aug 12 20:27 157753a5.0 -> 
../certfiles//cert_chain.pem
lrwxrwxrwx. 1 root root  30 Aug 12 20:27 8ee8b7b0.0 -> 
../certfiles//cas.dev.cert.pem
-rwxr-xr-x. 1 root root 168 Aug 12 20:27 make_hashes.sh

Since I am not altogether familiar with how c_rehash is supposed to work, this 
looked reasonably OK to me.
The links resolve to the actual PEM files.

Thanks,
Carl

----- Original Message -----
From: "David Hawes" <[email protected]>
To: [email protected]
Sent: Wednesday, August 12, 2015 10:21:06 PM
Subject: Re: [cas-user] mod_auth_cas - trust question

On Wed, Aug 12, 2015 at 8:57 PM, Waldbieser, Carl
<[email protected]> wrote:
> I still wasn't able to get using a folder of PEM files to work.

Did you hash the files with OpenSSL's c_rehash?

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to