24 lines
946 B
Plaintext

# Carols acert for sales and finance
pki --acert \
--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
--in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \
--group sales --group finance -l 87600 -f pem \
> hosts/moon/etc/ipsec.d/acerts/carol-sales-finance.pem
# Daves acert for marketing
pki --acert \
--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
--in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \
--group marketing -l 87600 -f pem \
> hosts/moon/etc/ipsec.d/acerts/dave-marketing.pem
# Daves expired acert for sales
pki --acert \
--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
--in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \
--group sales -F "01.01.13 08:00:00" -l 240 -f pem \
> hosts/moon/etc/ipsec.d/acerts/dave-sales-expired.pem