diff options
| -rw-r--r-- | doc/examples/ca.cpp | 28 |
1 files changed, 18 insertions, 10 deletions
diff --git a/doc/examples/ca.cpp b/doc/examples/ca.cpp index 62564df1a..5458a98cc 100644 --- a/doc/examples/ca.cpp +++ b/doc/examples/ca.cpp @@ -21,27 +21,35 @@ using namespace Botan; int main(int argc, char* argv[]) { - if(argc != 2) + if(argc != 5) { - std::cout << "Usage: " << argv[0] << " passphrase" << std::endl; + std::cout << "Usage: " << argv[0] << " <passphrase> " + << "<ca cert> <ca key> <pkcs10>" << std::endl; return 1; } - try { - // set up our CA - X509_Certificate ca_cert("cacert.pem"); + try + { + const std::string arg_passphrase = argv[1]; + const std::string arg_ca_cert = argv[2]; + const std::string arg_ca_key = argv[3]; + const std::string arg_req_file = argv[4]; + + X509_Certificate ca_cert(arg_ca_cert); + std::auto_ptr<PKCS8_PrivateKey> privkey( - PKCS8::load_key("caprivate.pem", argv[1]) + PKCS8::load_key(arg_ca_key, arg_passphrase) ); + X509_CA ca(ca_cert, *privkey); // got a request - PKCS10_Request req("req.pem"); + PKCS10_Request req(arg_req_file); - // presumably attempt to verify the req for sanity/accuracy here, but - // as Verisign, etc have shown, that's not a must. :) + // you would insert checks here, and perhaps modify the request + // (this example should be extended to show how) - // now sign it + // now sign the request X509_Certificate new_cert = ca.sign_request(req); // send the new cert back to the requestor |