#	$DevBox: BSDmakefile,v 1.1.1.1 2005/11/05 18:41:40 jimmy Exp $

CLIENT_DIR=client_CA
SERVER_DIR=server_CA

.PHONY : ${CLIENT_DIR} ${SERVER_DIR} clean



all: ${SERVER_DIR} ${CLIENT_DIR}

${CLIENT_DIR} ${SERVER_DIR}:
	rm -rf $@
	mkdir -p $@/certs $@/crl $@/newcerts $@/private
	cp etc/$@_openssl.cnf $@/openssl.cnf
	echo "01" > $@/serial
	touch $@/index.txt
	@echo
	@echo +++++++++++++++++++++++++++++++++++++++++++
	@echo +++++ CREATING CA CERT IN $@ +++++
	@echo +++++++++++++++++++++++++++++++++++++++++++
	@echo
	openssl req -new -x509 -keyout $@/private/cakey.pem \
		-out $@/cacert.pem -days 365 -config $@/openssl.cnf
	@echo
	@echo ++++++++++++++++++++++++++++++++++++++++++++++++++++++
	@echo +++++ CREATING SERVER/CLIENT CERT IN $@ +++++
	@echo ++++++++++++++++++++++++++++++++++++++++++++++++++++++
	@echo
	openssl req -nodes -new -x509 -keyout $@/newreq.pem \
		-out $@/newreq.pem -days 365 -config $@/openssl.cnf
	openssl x509 -x509toreq -in $@/newreq.pem -signkey $@/newreq.pem \
		-out $@/tmp.pem
	openssl ca -config $@/openssl.cnf -policy policy_anything \
		-out $@/newcert.pem -infiles $@/tmp.pem
	rm -f $@/tmp.pem

clean:
	rm -rf ${CLIENT_DIR} ${SERVER_DIR}