Skip to content

Commit e3740f4

Browse files
authored
Simplify how to run SCTFE with fake chain and manual chain generation in README (#41)
1 parent a38468e commit e3740f4

File tree

1 file changed

+5
-11
lines changed

1 file changed

+5
-11
lines changed

deployment/live/gcp/test/README.md

Lines changed: 5 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -53,27 +53,21 @@ tool](https://github.com/google/certificate-transparency-go/blob/master/trillian
5353
to do this.
5454

5555
#### Generate chains manually
56-
First, save the SCTFE repo's path:
5756

58-
```bash
59-
export SCTFE_REPO=$(pwd)
60-
```
61-
62-
Clone the [certificate-transparency-go](https://github.com/google/certificate-transparency-go) repo.
63-
Then, generate a chain manually. The password for the private key is `gently`:
57+
Generate a chain manually. The password for the private key is `gently`:
6458

6559
```bash
6660
mkdir -p /tmp/httpschain
6761
openssl genrsa -out /tmp/httpschain/cert.key 2048
68-
openssl req -new -key /tmp/httpschain/cert.key -out /tmp/httpschain/cert.csr -config=${SCTFE_REPO}/testdata/fake-ca.cfg
69-
openssl x509 -req -days 3650 -in /tmp/httpschain/cert.csr -CAkey ${SCTFE_REPO}/testdata/fake-ca.privkey.pem -CA ${SCTFE_REPO}/testdata/fake-ca.cert -outform pem -out /tmp/httpschain/chain.pem -provider legacy -provider default
70-
cat ${SCTFE_REPO}/testdata/fake-ca.cert >> /tmp/httpschain/chain.pem
62+
openssl req -new -key /tmp/httpschain/cert.key -out /tmp/httpschain/cert.csr -config=testdata/fake-ca.cfg
63+
openssl x509 -req -days 3650 -in /tmp/httpschain/cert.csr -CAkey testdata/fake-ca.privkey.pem -CA testdata/fake-ca.cert -outform pem -out /tmp/httpschain/chain.pem -provider legacy -provider default
64+
cat testdata/fake-ca.cert >> /tmp/httpschain/chain.pem
7165
```
7266

7367
Finally, submit the chain to the SCTFE:
7468

7569
```bash
76-
go run ./client/ctclient upload --cert_chain=/tmp/httpschain/chain.pem --skip_https_verify --log_uri=http://localhost:6962/${TESSERA_BASE_NAME}
70+
go run github.com/google/certificate-transparency-go/client/ctclient@master upload --cert_chain=/tmp/httpschain/chain.pem --skip_https_verify --log_uri=http://localhost:6962/${TESSERA_BASE_NAME}
7771
```
7872

7973
#### Automatically generate chains

0 commit comments

Comments
 (0)