62 $KT -genkeypair -alias user -dname CN=User -keyalg rsa
  63 
  64 # 2. Signing: ca -> user
  65 
  66 $KT -certreq -alias user | $KT -gencert -rfc -alias ca1 > samedn1.certs
  67 $KT -certreq -alias user | $KT -gencert -rfc -alias ca2 > samedn2.certs
  68 
  69 # 3. Append the ca file
  70 
  71 $KT -export -rfc -alias ca1 >> samedn1.certs
  72 $KT -export -rfc -alias ca2 >> samedn2.certs
  73 
  74 # 4. Remove user for cacerts
  75 
  76 $KT -delete -alias user
  77 
  78 # 5. Build and run test. Make sure the CA certs are ignored for validity check.
  79 # Check both, one of them might be dropped out of map in old codes.
  80 
  81 $JAVAC ${TESTJAVACOPTS} ${TESTTOOLVMOPTS} -d . ${TESTSRC}${FS}CertReplace.java
  82 $JAVA ${TESTVMOPTS} CertReplace samedn.jks samedn1.certs || exit 1
  83 $JAVA ${TESTVMOPTS} CertReplace samedn.jks samedn2.certs || exit 2

  62 $KT -genkeypair -alias user -dname CN=User -keyalg rsa
  63 
  64 # 2. Signing: ca -> user
  65 
  66 $KT -certreq -alias user | $KT -gencert -rfc -alias ca1 > samedn1.certs
  67 $KT -certreq -alias user | $KT -gencert -rfc -alias ca2 > samedn2.certs
  68 
  69 # 3. Append the ca file
  70 
  71 $KT -export -rfc -alias ca1 >> samedn1.certs
  72 $KT -export -rfc -alias ca2 >> samedn2.certs
  73 
  74 # 4. Remove user for cacerts
  75 
  76 $KT -delete -alias user
  77 
  78 # 5. Build and run test. Make sure the CA certs are ignored for validity check.
  79 # Check both, one of them might be dropped out of map in old codes.
  80 
  81 $JAVAC ${TESTJAVACOPTS} ${TESTTOOLVMOPTS} -d . ${TESTSRC}${FS}CertReplace.java
  82 $JAVA ${TESTVMOPTS} ${TESTJAVAOPTS} CertReplace samedn.jks samedn1.certs || exit 1
  83 $JAVA ${TESTVMOPTS} ${TESTJAVAOPTS} CertReplace samedn.jks samedn2.certs || exit 2