X-Git-Url: http://wagner.pp.ru/gitweb/?a=blobdiff_plain;f=tcl_tests%2Fossltest.tcl;h=ed657d6271936827fa83fcaf02164d9d40f6d924;hb=HEAD;hp=a6f02836c09b80284b48701c88947f63833a8927;hpb=c60fb20676ad9420e14e5d3377267c2bc620e6ea;p=openssl-gost%2Fengine.git

diff --git a/tcl_tests/ossltest.tcl b/tcl_tests/ossltest.tcl
index a6f0283..ed657d6 100644
--- a/tcl_tests/ossltest.tcl
+++ b/tcl_tests/ossltest.tcl
@@ -61,6 +61,16 @@ package require test
 set test::suffix ""
 package require base64
 
+#
+# set  up test::src variable
+#
+
+if {[info exists env(TESTSRC)]} {
+	set ::test::src [file normalize $env(TESTSRC)]
+} else {
+	set ::test::src [pwd]
+}	
+
 #
 # set  up test::dir variable
 #
@@ -210,11 +220,33 @@ CN=Test CA $algor_with_par
 O=Cryptocom
 OU=OpenSSL CA
 emailAddress = openssl@cryptocom.ru
+\[ v3_ca \]
+# Extensions for a typical CA
+# PKIX recommendation.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid:always,issuer
+basicConstraints = critical,CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
 "
 	file mkdir $CAname/private
 	file mkdir $CAname/newcerts
 	generate_key [keygen_params $algor_with_par] $CAname/private/cakey.pem
-	openssl "req -new  -x509 -key $CAname/private/cakey.pem -nodes -out $CAname/cacert.pem -config $CAname/req.conf -set_serial 0x11E"
+	openssl "req -new  -x509 -key $CAname/private/cakey.pem -nodes -out $CAname/cacert.pem -config $CAname/req.conf -reqexts v3_ca -set_serial 0x11E"
 	makeFile ./$CAname/.rand 1234567890
 	makeFile ./$CAname/serial 011E
 	makeFile ./$CAname/index.txt ""