Generation of Permissions CA private key:
openssl genrsa -out permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem 2048
Generation of self-signed certificate request for the Permissions CA
openssl req -config permissions_ca_files/permissions_ca_openssl.cnf -new -key permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem -out permissions_ca_files/permissions_ca.csr
Generation of Certificate for the Permissions CA (signing of certificate request)
openssl x509 -req -days 3650 -in permissions_ca_files/permissions_ca.csr -signkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem -out TESTONLY_permissions_ca_cert.pem
Initialization of Index and Serial number files
touch permissions_ca_files/index.txt echo "01" > permissions_ca_files/serial
Signing the governance document
openssl smime -sign -in TESTONLY_governance.xml -text -out TESTONLY_governance_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the permissions documents for RTI
openssl smime -sign -in rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_join.xml -text -out rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_join_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_read.xml -text -out rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_read_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_write.xml -text -out rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_write_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_readwrite.xml -text -out rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_readwrite_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_allowall.xml -text -out rti_connext_dds_certs/TESTONLY_rti_connext_dds_permissions_allowall_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the permissions documents for TwinOaks computing
openssl smime -sign -in toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_join.xml -text -out toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_join_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_read.xml -text -out toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_read_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_write.xml -text -out toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_write_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_readwrite.xml -text -out toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_readwrite_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_allowall.xml -text -out toc_coredx_dds_certs/TESTONLY_toc_coredx_dds_permissions_allowall_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the permissions documents for Kongsberg Defence & Aerospace
openssl smime -sign -in kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_join.xml -text -out kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_join_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_read.xml -text -out kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_read_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_write.xml -text -out kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_write_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_readwrite.xml -text -out kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_readwrite_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_allowall.xml -text -out kda_intercom_dds_certs/TESTONLY_kda_intercom_dds_permissions_allowall_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the permissions documents for ADLINK
openssl smime -sign -in ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_join.xml -text -out ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_join_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_read.xml -text -out ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_read_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_write.xml -text -out ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_write_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_readwrite.xml -text -out ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_readwrite_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_allowall.xml -text -out ad_vortex_dds_certs/TESTONLY_ad_vortex_dds_permissions_allowall_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the permissions documents for Object Computing, Inc.
openssl smime -sign -in oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_join.xml -text -out oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_join_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_read.xml -text -out oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_read_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_write.xml -text -out oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_write_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_readwrite.xml -text -out oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_readwrite_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_allowall.xml -text -out oci_opendds_dds_certs/TESTONLY_oci_opendds_dds_permissions_allowall_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the permissions documents for eProsima Fast-RTPS.
openssl smime -sign -in eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_join.xml -text -out eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_join_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_read.xml -text -out eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_read_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_write.xml -text -out eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_write_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_readwrite.xml -text -out eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_readwrite_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
openssl smime -sign -in eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_allowall.xml -text -out eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_permissions_allowall_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem
Signing the governance document for eProsima Fast-RTPS.
openssl smime -sign -in eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_governance.xml -text -out eprosima_fastrtps_certs/TESTONLY_eprosima_fastrtps_governance_signed.p7s -signer TESTONLY_permissions_ca_cert.pem -inkey permissions_ca_files/private/TESTONLY_permissions_ca_private_key.pem