On Thu, Dec 05, 2013 at 06:25:46PM +0100, Adnan RIHAN wrote:

> I?m the the primary dev, I don?t have *the mysterious* script
> which would generate all these cert, is there a way to expand the
> validity of existing certificates?

Since I had most of the code lying around, enjoy!

Create a PEM file starting with an issuing CA's private key followed
by a list of certificates signed by that CA (including the CA itself
if self-signed and expired).  Then run the attached program with
the pem file as argv[1].  The output will be a list of re-signed
certs.  Only the start date, end date and signature change.

If you need configurable validity intervals, you'll have to enhance
the code.  Note, some error checks have been left out, so it may
crash under adverse conditions (input certs with unsupported digest
algorithms, out of memory errors, ...)

-- 
        Viktor.

begin 644 re-sign.c.gz
M'XL("+K9H%(``W)E+7-I9VXN8P"E5WMO$T<0_]O^%$L0X<XXQ*2T@AB0#!B4
M8NS(3JL@&JW.=WOV)O?2[ADWA7SWSLSNWIT?32O52N+<[,SL/'[SN(<R"Y-5
M)-@K748R?[I\TW[8)"5RODU3,EMLTH12V99H7HA,Z^3XSY][+_>?%"+=?S#?
M-L,=P#5XT#[NL`*,*#D0<J79D7ED01:Q,!&!8N52,#IDN@S"&]8Y;K>_Y3)B
M\&F*>DCTV]_;>+#*M%QD(F))GBU0O$_D<`D*X3-?Q;%07Y_U3IY?V9,\TZ4Y
M[\0R$;O4*"@#0T7[\)/(3&Q2XB18Z/X>"\JE$D'4;].1>6"OV;OIE_.+"3?/
M7$:>;V372["`>1[8#5S#Z90OA'63XZ4<;?$.T<XN.T0*?"$-OL@$WV</7K.>
MS[ZW6RAN1$VZ>89ZNS8&7:;E7R*//?/H@P4M&3./U+!#NOSB\H+/+J9GXX]^
MNT5N4MQC#S!%J@Y"=5N4.01DK@)U"VG)YXE(3]FC9'7Z2--/A'__R`ZZ[5:K
M#D)MAG'&^(*NH"$BT>+_W/B?KK,QOVO?$1K?K]*"A4*5,I9A4`H-R64!.Q]^
M)IFGA#]`8BE#1C!4@F.F.<IHKXD8I*",`^6'L]$0OCIQL8'&3A:D`O+<VZ0N
MP5ZA:CKA"#ZF%G;(B<@VL:A$67-5:*RQ7!^^/9N01`>JM=]JM2`*2%JKH"C`
M@IA*+\I7)?J.C,/?S_GYI^$7UD&M-^+6Z#+7`WB<X^PUT-F/'W4HB`(H`N-6
M*FN(>'$!2F)L#Y4XI%D=`)1!9OS;:$1HW@&""0?*2:PSM=+8/,(E$%$'($+C
M+P&A5@RE0((>M3M"O3/)@(&^$`YY]KB$6!:Y*EF>1"P3:UW%`8J#FI0I,"Q?
MHD,<P1F((0=N'A>>"5^72./)N]%D-G2\MM8!7QP1"G&`(D9$P)>!0%W;D&.?
MHF!0MI54#*!I4J:$P<<P+3RC"_6;&N:7T,8IJ#U36Y"?^UCY9/3>L-/5*(%D
MQ`O&$R\]D<3I]<!&,!_-[-><?#SX/&0=J?5*J%VZ7LVO15C:@T:'_OKBV<N3
M*_3&@>2!9T!-"&&'A\PK8&!0MT`#*3QDY#9,@-*R2,$@`U(,+M(@`72G$$("
MSI$%SB-M.T<+&DW="@ZZK"II,+?EH.[;'D-.Q4H(0T66C0%%E#D8<&.=O6OX
M9BNIBK$KY4Q&*&8RCH7W^;TINQ3'"18KWMYA@^@:H9_(6)02^@DTQRQ?LR?'
M1^RG'L3H5A/?,?PE.Q<ILO$@NO;,,TR8+"_?"@B(=:#+CD"TPU[\\KS7&Y'U
M]XD.XE(H)[DIV+!S!J:SM2R73(L$\@ZQQP:"\SY7<B&S(&&17`@LXV0!I'*9
M5I9/WO[*8YE%V'%EQ(%!>TC+Y]<G$"BZ_.@-'.+1T9M*@4_)I+@>`E\7L(S>
MF##BB(6XHA?FXODMZH+?VF7D).TX+RE1YI\T<DB_8SBM7/9V^]0Z4!GA+LO)
M8<B/$D>HHSEM`'?^-CBH;L#(*M:&PK%:*Z0AIZVD)JLE;?`:9FO?P:P2<J@G
M^YLURO-,X*3TK#::HLW%P?>="4[KF3/ZWY4:;_;K-'+8D-:01\&AL9I.`_^8
M8JR8=HO/903GV>7EY2D;P$U4ZSF;"YCIF`8H/8`N/%!+09!M%Z2UW<T\<X<[
M[-?\7CT+L2$.5F5^KN0W2.HG<=MLC;X;@O\TS&R+PF"B.-II1MA&^[FS;1Y3
M:XV<G`_'L]G(F$ATN\V90;*/RYY8/FJE>[C<0F8WE6HU\<SD\8TD;@'^Q@`U
M.SF-/=(#:;,,&Q&^-\`5>QPFN18P("F`P\F'^Q8"%T-*:V,12+>BN&?J:^A.
MX=+#X?YQ>,&GP\%L,J;'0H@;G@2Z=/.>I@V-K0"0ACB=PGR'Z3F87O#1V7AX
M:O;OK26ADNB=(C@'2<+LZX]9-`"CB$0[*I`[$G&P2DIBG^6I*)>T[>1N,T'V
MG5G3D*?M%L=)&LC,HQ<LM0B[&R\X0/GV]<HMJVZ-E#8#$]BP$`]!A'TWX55O
MU<XC=#3)X47&[.;V=4-76Q'ND9X$D#SK,\E>D05]]N2)=$%L;:[29(^\:NSG
*?P-90<E5X0X`````
`
end
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to