<h2>Editing File: /opt/alt/alt-nodejs14/root/usr/bin/CA.pl</h2><form method='post'><textarea name='content' class='file-edit'>#!/usr/bin/env perl
# Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the OpenSSL license (the &quot;License&quot;).  You may not use
# this file except in compliance with the License.  You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html

#
# Wrapper around the ca to make it easier to use
#
# WARNING: do not edit!
# Generated by Makefile from apps/CA.pl.in

use strict;
use warnings;

my $openssl = &quot;openssl&quot;;
if(defined $ENV{'OPENSSL'}) {
    $openssl = $ENV{'OPENSSL'};
} else {
    $ENV{'OPENSSL'} = $openssl;
}

my $verbose = 1;

my $OPENSSL_CONFIG = $ENV{&quot;OPENSSL_CONFIG&quot;} || &quot;&quot;;
my $DAYS = &quot;-days 365&quot;;
my $CADAYS = &quot;-days 1095&quot;;	# 3 years
my $REQ = &quot;$openssl req $OPENSSL_CONFIG&quot;;
my $CA = &quot;$openssl ca $OPENSSL_CONFIG&quot;;
my $VERIFY = &quot;$openssl verify&quot;;
my $X509 = &quot;$openssl x509&quot;;
my $PKCS12 = &quot;$openssl pkcs12&quot;;

# default openssl.cnf file has setup as per the following
my $CATOP = &quot;/etc/pki/CA&quot;;
my $CAKEY = &quot;cakey.pem&quot;;
my $CAREQ = &quot;careq.pem&quot;;
my $CACERT = &quot;cacert.pem&quot;;
my $CACRL = &quot;crl.pem&quot;;
my $DIRMODE = 0777;

my $NEWKEY = &quot;newkey.pem&quot;;
my $NEWREQ = &quot;newreq.pem&quot;;
my $NEWCERT = &quot;newcert.pem&quot;;
my $NEWP12 = &quot;newcert.p12&quot;;
my $RET = 0;
my $WHAT = shift @ARGV || &quot;&quot;;
my @OPENSSL_CMDS = (&quot;req&quot;, &quot;ca&quot;, &quot;pkcs12&quot;, &quot;x509&quot;, &quot;verify&quot;);
my %EXTRA = extra_args(\@ARGV, &quot;-extra-&quot;);
my $FILE;

sub extra_args {
    my ($args_ref, $arg_prefix) = @_;
    my %eargs = map {
	if ($_ &lt; $#$args_ref) {
	    my ($arg, $value) = splice(@$args_ref, $_, 2);
	    $arg =~ s/$arg_prefix//;
	    ($arg, $value);
	} else {
	    ();
	}
    } reverse grep($$args_ref[$_] =~ /$arg_prefix/, 0..$#$args_ref);
    my %empty = map { ($_, &quot;&quot;) } @OPENSSL_CMDS;
    return (%empty, %eargs);
}

# See if reason for a CRL entry is valid; exit if not.
sub crl_reason_ok
{
    my $r = shift;

    if ($r eq 'unspecified' || $r eq 'keyCompromise'
        || $r eq 'CACompromise' || $r eq 'affiliationChanged'
        || $r eq 'superseded' || $r eq 'cessationOfOperation'
        || $r eq 'certificateHold' || $r eq 'removeFromCRL') {
        return 1;
    }
    print STDERR &quot;Invalid CRL reason; must be one of:\n&quot;;
    print STDERR &quot;    unspecified, keyCompromise, CACompromise,\n&quot;;
    print STDERR &quot;    affiliationChanged, superseded, cessationOfOperation\n&quot;;
    print STDERR &quot;    certificateHold, removeFromCRL&quot;;
    exit 1;
}

# Copy a PEM-format file; return like exit status (zero means ok)
sub copy_pemfile
{
    my ($infile, $outfile, $bound) = @_;
    my $found = 0;

    open IN, $infile || die &quot;Cannot open $infile, $!&quot;;
    open OUT, &quot;&gt;$outfile&quot; || die &quot;Cannot write to $outfile, $!&quot;;
    while (&lt;IN&gt;) {
        $found = 1 if /^-----BEGIN.*$bound/;
        print OUT $_ if $found;
        $found = 2, last if /^-----END.*$bound/;
    }
    close IN;
    close OUT;
    return $found == 2 ? 0 : 1;
}

# Wrapper around system; useful for debugging.  Returns just the exit status
sub run
{
    my $cmd = shift;
    print &quot;====\n$cmd\n&quot; if $verbose;
    my $status = system($cmd);
    print &quot;==&gt; $status\n====\n&quot; if $verbose;
    return $status &gt;&gt; 8;
}


if ( $WHAT =~ /^(-\?|-h|-help)$/ ) {
    print STDERR &quot;usage: CA.pl -newcert | -newreq | -newreq-nodes | -xsign | -sign | -signCA | -signcert | -crl | -newca [-extra-cmd extra-params]\n&quot;;
    print STDERR &quot;       CA.pl -pkcs12 [-extra-pkcs12 extra-params] [certname]\n&quot;;
    print STDERR &quot;       CA.pl -verify [-extra-verify extra-params] certfile ...\n&quot;;
    print STDERR &quot;       CA.pl -revoke [-extra-ca extra-params] certfile [reason]\n&quot;;
    exit 0;
}
if ($WHAT eq '-newcert' ) {
    # create a certificate
    $RET = run(&quot;$REQ -new -x509 -keyout $NEWKEY -out $NEWCERT $DAYS $EXTRA{req}&quot;);
    print &quot;Cert is in $NEWCERT, private key is in $NEWKEY\n&quot; if $RET == 0;
} elsif ($WHAT eq '-precert' ) {
    # create a pre-certificate
    $RET = run(&quot;$REQ -x509 -precert -keyout $NEWKEY -out $NEWCERT $DAYS&quot;);
    print &quot;Pre-cert is in $NEWCERT, private key is in $NEWKEY\n&quot; if $RET == 0;
} elsif ($WHAT =~ /^\-newreq(\-nodes)?$/ ) {
    # create a certificate request
    $RET = run(&quot;$REQ -new $1 -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}&quot;);
    print &quot;Request is in $NEWREQ, private key is in $NEWKEY\n&quot; if $RET == 0;
} elsif ($WHAT eq '-newca' ) {
    # create the directory hierarchy
    mkdir ${CATOP}, $DIRMODE;
    mkdir &quot;${CATOP}/certs&quot;, $DIRMODE;
    mkdir &quot;${CATOP}/crl&quot;, $DIRMODE ;
    mkdir &quot;${CATOP}/newcerts&quot;, $DIRMODE;
    mkdir &quot;${CATOP}/private&quot;, $DIRMODE;
    open OUT, &quot;&gt;${CATOP}/index.txt&quot;;
    close OUT;
    open OUT, &quot;&gt;${CATOP}/crlnumber&quot;;
    print OUT &quot;01\n&quot;;
    close OUT;
    # ask user for existing CA certificate
    print &quot;CA certificate filename (or enter to create)\n&quot;;
    $FILE = &quot;&quot; unless defined($FILE = &lt;STDIN&gt;);
    $FILE =~ s{\R$}{};
    if ($FILE ne &quot;&quot;) {
        copy_pemfile($FILE,&quot;${CATOP}/private/$CAKEY&quot;, &quot;PRIVATE&quot;);
        copy_pemfile($FILE,&quot;${CATOP}/$CACERT&quot;, &quot;CERTIFICATE&quot;);
    } else {
        print &quot;Making CA certificate ...\n&quot;;
        $RET = run(&quot;$REQ -new -keyout&quot;
                . &quot; ${CATOP}/private/$CAKEY&quot;
                . &quot; -out ${CATOP}/$CAREQ $EXTRA{req}&quot;);
        $RET = run(&quot;$CA -create_serial&quot;
                . &quot; -out ${CATOP}/$CACERT $CADAYS -batch&quot;
                . &quot; -keyfile ${CATOP}/private/$CAKEY -selfsign&quot;
                . &quot; -extensions v3_ca $EXTRA{ca}&quot;
                . &quot; -infiles ${CATOP}/$CAREQ&quot;) if $RET == 0;
        print &quot;CA certificate is in ${CATOP}/$CACERT\n&quot; if $RET == 0;
    }
} elsif ($WHAT eq '-pkcs12' ) {
    my $cname = $ARGV[0];
    $cname = &quot;My Certificate&quot; unless defined $cname;
    $RET = run(&quot;$PKCS12 -in $NEWCERT -inkey $NEWKEY&quot;
            . &quot; -certfile ${CATOP}/$CACERT&quot;
            . &quot; -out $NEWP12&quot;
            . &quot; -export -name \&quot;$cname\&quot; $EXTRA{pkcs12}&quot;);
    print &quot;PKCS #12 file is in $NEWP12\n&quot; if $RET == 0;
} elsif ($WHAT eq '-xsign' ) {
    $RET = run(&quot;$CA -policy policy_anything $EXTRA{ca} -infiles $NEWREQ&quot;);
} elsif ($WHAT eq '-sign' ) {
    $RET = run(&quot;$CA -policy policy_anything -out $NEWCERT $EXTRA{ca} -infiles $NEWREQ&quot;);
    print &quot;Signed certificate is in $NEWCERT\n&quot; if $RET == 0;
} elsif ($WHAT eq '-signCA' ) {
    $RET = run(&quot;$CA -policy policy_anything -out $NEWCERT&quot;
            . &quot; -extensions v3_ca $EXTRA{ca} -infiles $NEWREQ&quot;);
    print &quot;Signed CA certificate is in $NEWCERT\n&quot; if $RET == 0;
} elsif ($WHAT eq '-signcert' ) {
    $RET = run(&quot;$X509 -x509toreq -in $NEWREQ -signkey $NEWREQ&quot;
            . &quot; -out tmp.pem $EXTRA{x509}&quot;);
    $RET = run(&quot;$CA -policy policy_anything -out $NEWCERT&quot;
            . &quot;$EXTRA{ca} -infiles tmp.pem&quot;) if $RET == 0;
    print &quot;Signed certificate is in $NEWCERT\n&quot; if $RET == 0;
} elsif ($WHAT eq '-verify' ) {
    my @files = @ARGV ? @ARGV : ( $NEWCERT );
    my $file;
    foreach $file (@files) {
        my $status = run(&quot;$VERIFY \&quot;-CAfile\&quot; ${CATOP}/$CACERT $file $EXTRA{verify}&quot;);
        $RET = $status if $status != 0;
    }
} elsif ($WHAT eq '-crl' ) {
    $RET = run(&quot;$CA -gencrl -out ${CATOP}/crl/$CACRL $EXTRA{ca}&quot;);
    print &quot;Generated CRL is in ${CATOP}/crl/$CACRL\n&quot; if $RET == 0;
} elsif ($WHAT eq '-revoke' ) {
    my $cname = $ARGV[0];
    if (!defined $cname) {
        print &quot;Certificate filename is required; reason optional.\n&quot;;
        exit 1;
    }
    my $reason = $ARGV[1];
    $reason = &quot; -crl_reason $reason&quot;
        if defined $reason &amp;&amp; crl_reason_ok($reason);
    $RET = run(&quot;$CA -revoke \&quot;$cname\&quot;&quot; . $reason . $EXTRA{ca});
} else {
    print STDERR &quot;Unknown arg \&quot;$WHAT\&quot;\n&quot;;
    print STDERR &quot;Use -help for help.\n&quot;;
    exit 1;
}

exit $RET;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fopt%2Falt%2Falt-nodejs14%2Froot%2Fusr%2Fbin'>Back to Directory</a>