GENERATED = \
	x509-ca-key.pem \
	x509-ca.pem \
	x509-subca-key.pem \
	x509-subca.pem \
	x509-ca-chain.pem \
	x509-server-key.pem \
	x509-server.pem \
	x509-server2-key.pem \
	x509-server2.pem \
	x509-server2-chain.pem

all: $(GENERATED)

x509-ca-key.pem:
	certtool -p --outfile x509-ca-key.pem

x509-ca.pem:
	certtool --generate-self-signed \
		--load-privkey x509-ca-key.pem \
		--outfile x509-ca.pem \
		--template ca.cfg

x509-subca-key.pem:
	certtool -p --outfile x509-subca-key.pem

x509-subca.pem:
	certtool --generate-certificate \
		--load-privkey x509-subca-key.pem \
		--load-ca-privkey x509-ca-key.pem \
		--load-ca-certificate x509-ca.pem \
		--outfile x509-subca.pem \
		--template subca.cfg

x509-ca-chain.pem:
	cat x509-ca.pem x509-subca.pem > x509-ca-chain.pem

x509-server-key.pem:
	certtool -p --outfile x509-server-key.pem

x509-server.pem:
	certtool --generate-certificate \
		--load-privkey x509-server-key.pem \
		--load-ca-privkey x509-subca-key.pem \
		--load-ca-certificate x509-subca.pem \
		--outfile x509-server.pem \
		--template server.cfg

x509-server2-key.pem:
	certtool -p --outfile x509-server2-key.pem

x509-server2.pem:
	certtool --generate-certificate \
		--load-privkey x509-server2-key.pem \
		--load-ca-privkey x509-subca-key.pem \
		--load-ca-certificate x509-subca.pem \
		--outfile x509-server2.pem \
		--template server2.cfg

x509-server2-chain.pem:
	cat x509-server2.pem x509-subca.pem > x509-server2-chain.pem

test:
	gnutls-cli expired-subca.demo.gnutls.org --x509cafile x509-ca-chain.pem 

clean:
	rm -f $(GENERATED) *~