re-added the '-selfsign' option so that at least the 'newca' command works with opens...

[stack/cam.git] / lib / newca.py

diff --git a/lib/newca.py b/lib/newca.py
index 75e1cd6..63fcea2 100644 (file)
--- a/lib/newca.py
+++ b/lib/newca.py
@@ -48,13 +48,13 @@ def newca():
                '-config', conf_file, '-batch',
                '-keyfile', ca_key_file,
                '-extensions', 'v3_ca', 
-               '-out', ca_file,
+               '-out', ca_file, '-selfsign',
                '-infiles', ca_csr_file)
        openssl('ca', 
                '-config', conf_file, '-batch',
                '-keyfile', ca_dsa_key_file,
                '-extensions', 'v3_ca',
-               '-out', ca_dsa_file,
+               '-out', ca_dsa_file, '-selfsign',
                '-infiles', ca_dsa_csr_file)
        open(ca_file, 'a').write(open(ca_dsa_file, 'r').read())
        os.remove(ca_dsa_file)