···

       
1
       
1
       
-
       
[submodule "nvim/pack/minpac/opt/minpac"]

     

       
2
       
2
       
-
       
	path = nvim/pack/minpac/opt/minpac

     

       
3
       
3
       
-
       
	url = git://github.com/k-takata/minpac.git

     

···

       
1
       
1
       
+
       
tap "burntsushi/ripgrep", "https://github.com/BurntSushi/ripgrep.git"

     

       
1
       
2
       
 
       
tap "crisidev/chunkwm"

     

       
3
       
3
       
+
       
tap "homebrew/bundle"

     

       
4
       
4
       
+
       
tap "homebrew/cask"

     

       
2
       
5
       
 
       
tap "homebrew/core"

     

       
3
       
3
       
-
       
tap "homebrew/cask"

     

       
4
       
4
       
-
       
tap "homebrew/bundle"

     

       
5
       
6
       
 
       
tap "homebrew/services"

     

       
6
       
6
       
-
       
tap "minio/stable"

     

       
7
       
7
       
 
       
tap "koekeishiya/formulae"

     

       
8
       
8
       
-
       
tap "burntsushi/ripgrep", "https://github.com/BurntSushi/ripgrep.git"

     

       
8
       
8
       
+
       
tap "minio/stable"

     

       
9
       
9
       
 
       
tap "neovim/neovim"

     

       
10
       
10
       
 
       
tap "universal-ctags/universal-ctags"

     

       
11
       
11
       
+
       
cask "java"

     

       
11
       
12
       
 
       
cask "xquartz"

     

       
12
       
13
       
 
       
brew "asciinema"

     

       
13
       
14
       
 
       
brew "autoconf"

     

       
14
       
15
       
 
       
brew "automake"

     

       
15
       
16
       
 
       
brew "awscli"

     

       
16
       
16
       
-
       
brew "cmake"

     

       
17
       
17
       
+
       
brew "bmake"

     

       
17
       
18
       
 
       
brew "coreutils"

     

       
18
       
19
       
 
       
brew "cowsay"

     

       
19
       
20
       
 
       
brew "curl"

     

       
20
       
21
       
 
       
brew "direnv"

     

       
22
       
22
       
+
       
brew "entr"

     

       
23
       
23
       
+
       
brew "ffmpeg"

     

       
21
       
24
       
 
       
brew "fish"

     

       
22
       
25
       
 
       
brew "fortune"

     

       
23
       
26
       
 
       
brew "fzf"

     

       
24
       
27
       
 
       
brew "gettext"

     

       
25
       
28
       
 
       
brew "gawk"

     

       
26
       
26
       
-
       
brew "ghc"

     

       
27
       
29
       
 
       
brew "git"

     

       
28
       
30
       
 
       
brew "git-imerge"

     

       
29
       
31
       
 
       
brew "git-lfs"

     

       
30
       
32
       
 
       
brew "git-test"

     

       
31
       
33
       
 
       
brew "gnupg", link: false

     

       
32
       
34
       
 
       
brew "graphviz"

     

       
35
       
35
       
+
       
brew "highlight"

     

       
33
       
36
       
 
       
brew "htop"

     

       
34
       
37
       
 
       
brew "httpie"

     

       
35
       
38
       
 
       
brew "hub"

     

       
39
       
39
       
+
       
brew "hugo"

     

       
36
       
40
       
 
       
brew "imagemagick"

     

       
41
       
41
       
+
       
brew "influxdb"

     

       
37
       
42
       
 
       
brew "jpegoptim"

     

       
38
       
43
       
 
       
brew "jq"

     

       
44
       
44
       
+
       
brew "jupyter"

     

       
39
       
45
       
 
       
brew "keychain"

     

       
40
       
46
       
 
       
brew "kubernetes-cli"

     

       
47
       
47
       
+
       
brew "leiningen"

     

       
41
       
48
       
 
       
brew "libyaml"

     

       
42
       
49
       
 
       
brew "lnav"

     

       
50
       
50
       
+
       
brew "mdp"

     

       
43
       
51
       
 
       
brew "minio-mc"

     

       
44
       
44
       
-
       
brew "mit-scheme"

     

       
45
       
52
       
 
       
brew "mmv"

     

       
46
       
53
       
 
       
brew "ncdu"

     

       
47
       
54
       
 
       
brew "neovim"

     

       
48
       
55
       
 
       
brew "optipng"

     

       
49
       
56
       
 
       
brew "osquery"

     

       
50
       
50
       
-
       
brew "pandoc"

     

       
51
       
57
       
 
       
brew "parallel"

     

       
52
       
52
       
-
       
brew "pkg-config"

     

       
58
       
58
       
+
       
brew "pijul"

     

       
59
       
59
       
+
       
brew "plantuml"

     

       
53
       
60
       
 
       
brew "postgis"

     

       
54
       
61
       
 
       
brew "pv"

     

       
55
       
62
       
 
       
brew "rclone"

     

       
63
       
63
       
+
       
brew "rsync"

     

       
64
       
64
       
+
       
brew "salt"

     

       
65
       
65
       
+
       
brew "stow"

     

       
66
       
66
       
+
       
brew "telegraf"

     

       
56
       
67
       
 
       
brew "terminal-notifier"

     

       
68
       
68
       
+
       
brew "tig"

     

       
57
       
69
       
 
       
brew "tree"

     

       
58
       
58
       
-
       
brew "watchman"

     

       
70
       
70
       
+
       
brew "watch"

     

       
71
       
71
       
+
       
brew "watchexec"

     

       
59
       
72
       
 
       
brew "weechat", args: ["with-aspell", "with-lua", "with-perl", "with-python@2", "with-ruby"]

     

       
60
       
73
       
 
       
brew "wget"

     

       
61
       
74
       
 
       
brew "wrk"

     
···

       
76
       
89
       
 
       
cask "gpg-suite"

     

       
77
       
90
       
 
       
cask "iterm2"

     

       
78
       
91
       
 
       
cask "karabiner-elements"

     

       
92
       
92
       
+
       
cask "kitty"

     

       
79
       
93
       
 
       
cask "qnapi"

     

       
80
       
94
       
 
       
cask "sketch"

     

       
81
       
95
       
 
       
cask "spotify"

     

···

       
1
       
1
       
-
       
LNFLAGS = -sf

     

       
2
       
2
       
-
       
export LN = ln $(LNFLAGS)

     

       
3
       
3
       
-
       


     

       
4
       
4
       
-
       
export WGET = wget -Nqnv

     

       
5
       
5
       
-
       


     

       
6
       
6
       
-
       
export PWD = $(shell pwd)

     

       
7
       
7
       
-
       


     

       
8
       
8
       
-
       
TARGETS ?= fish bin nvim git utils iterm2 ctags wm

     

       
1
       
1
       
+
       
TARGETS ?= fish vim kitty git ctags wm misc

     

       
9
       
2
       
 
       


     

       
10
       
3
       
 
       
all: $(TARGETS)

     

       
11
       
4
       
 
       


     

       
12
       
5
       
 
       
$(TARGETS):

     

       
13
       
13
       
-
       
	$(MAKE) -C $@ install

     

       
14
       
14
       
-
       


     

       
15
       
15
       
-
       
update:

     

       
16
       
16
       
-
       
	@git submodule foreach git pull

     

       
6
       
6
       
+
       
	@printf "%s\t" $@

     

       
7
       
7
       
+
       
	@stow -t "${HOME}" -R "$@" 2> /dev/null && printf "\033[32m✓" || printf "\033[31m✗"

     

       
8
       
8
       
+
       
	@printf "\033[m\n"

     

       
17
       
9
       
 
       


     

       
18
       
10
       
 
       
.PHONY: $(TARGETS) all

     

This is a binary file and will not be displayed.

···

       
1
       
1
       
-
       
PWD = $(shell pwd)

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
install:

     

       
4
       
4
       
-
       
	@echo 'Add $(PWD) to your $$PATH'

     

       
5
       
5
       
-
       


     

       
6
       
6
       
-
       
.PHONY: install

     

This is a binary file and will not be displayed.

···

       
1
       
1
       
-
       
#!/bin/sh

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
set -e

     

       
4
       
4
       
-
       


     

       
5
       
5
       
-
       
git branch --merged master | grep -v '^\*' | grep -v master | xargs -n1 git branch -d

     

···

       
1
       
1
       
-
       
#!/bin/bash

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
set -eo pipefail

     

       
4
       
4
       
-
       


     

       
5
       
5
       
-
       
USAGE=$(cat <<EOF

     

       
6
       
6
       
-
       
 | [-d|--define] <identity> <name> <email>

     

       
7
       
7
       
-
       
 | [-p|--print] <identity>

     

       
8
       
8
       
-
       
 | [-r|--remove] <identity>

     

       
9
       
9
       
-
       
 | [-l|--list]

     

       
10
       
10
       
-
       
 | [-R|--list-raw]

     

       
11
       
11
       
-
       
 | [-h|--help]

     

       
12
       
12
       
-
       
 | <identity>

     

       
13
       
13
       
-
       


     

       
14
       
14
       
-
       
Define identity globally:

     

       
15
       
15
       
-
       
  git -d private "My Name Suername" me@example.com

     

       
16
       
16
       
-
       
  git -d company "My Name Suername" me@your-company.com

     

       
17
       
17
       
-
       


     

       
18
       
18
       
-
       
Use identity in your git repository:

     

       
19
       
19
       
-
       
  cd your_repository

     

       
20
       
20
       
-
       
  git identity private

     

       
21
       
21
       
-
       


     

       
22
       
22
       
-
       
List current identity:

     

       
23
       
23
       
-
       
  cd your_repository

     

       
24
       
24
       
-
       
  git identity private

     

       
25
       
25
       
-
       
 

     

       
26
       
26
       
-
       
Print current identity:

     

       
27
       
27
       
-
       
  cd your_repository

     

       
28
       
28
       
-
       
  git identity

     

       
29
       
29
       
-
       


     

       
30
       
30
       
-
       
EOF)

     

       
31
       
31
       
-
       


     

       
32
       
32
       
-
       
error () {

     

       
33
       
33
       
-
       
  local message="$1"

     

       
34
       
34
       
-
       
  (>&2 echo "$message")

     

       
35
       
35
       
-
       
  exit 1

     

       
36
       
36
       
-
       
}

     

       
37
       
37
       
-
       


     

       
38
       
38
       
-
       
lookup () {

     

       
39
       
39
       
-
       
  local identity="$1"

     

       
40
       
40
       
-
       
  local key="$2"

     

       
41
       
41
       
-
       


     

       
42
       
42
       
-
       
  git config "identity.$identity.$key" || error "Unknown identity: $identity"

     

       
43
       
43
       
-
       
}

     

       
44
       
44
       
-
       


     

       
45
       
45
       
-
       
format_identity () {

     

       
46
       
46
       
-
       
  local identity="$1"

     

       
47
       
47
       
-
       


     

       
48
       
48
       
-
       
  echo "[$identity] $(format_raw_identity "$identity")"

     

       
49
       
49
       
-
       
}

     

       
50
       
50
       
-
       


     

       
51
       
51
       
-
       
format_raw_identity () {

     

       
52
       
52
       
-
       
  local identity="$1"

     

       
53
       
53
       
-
       


     

       
54
       
54
       
-
       
  echo "$(lookup "$identity" name) <$(lookup "$identity" email)>"

     

       
55
       
55
       
-
       
}

     

       
56
       
56
       
-
       


     

       
57
       
57
       
-
       
use_identity () {

     

       
58
       
58
       
-
       
  local identity="$1"

     

       
59
       
59
       
-
       
  local name

     

       
60
       
60
       
-
       
  local email

     

       
61
       
61
       
-
       
  name="$(lookup "$identity" name)"

     

       
62
       
62
       
-
       
  email="$(lookup "$identity" email)"

     

       
63
       
63
       
-
       


     

       
64
       
64
       
-
       
  echo "Using identity: $(format_identity "$identity")"

     

       
65
       
65
       
-
       
  git config user.identity "$identity"

     

       
66
       
66
       
-
       
  git config user.name "$name"

     

       
67
       
67
       
-
       
  git config user.email "$email"

     

       
68
       
68
       
-
       
}

     

       
69
       
69
       
-
       


     

       
70
       
70
       
-
       
list_raw_identities () {

     

       
71
       
71
       
-
       
  git config --get-regexp '^identity\.' | cut -d. -f2 | sort -u

     

       
72
       
72
       
-
       
}

     

       
73
       
73
       
-
       


     

       
74
       
74
       
-
       
list_identities () {

     

       
75
       
75
       
-
       
  local identities

     

       
76
       
76
       
-
       


     

       
77
       
77
       
-
       
  identities="$(list_raw_identities)"

     

       
78
       
78
       
-
       


     

       
79
       
79
       
-
       
  echo "Available identities:"

     

       
80
       
80
       
-
       
  for identity in $identities; do

     

       
81
       
81
       
-
       
    format_identity "$identity"

     

       
82
       
82
       
-
       
  done

     

       
83
       
83
       
-
       
}

     

       
84
       
84
       
-
       


     

       
85
       
85
       
-
       
print_raw_identity () {

     

       
86
       
86
       
-
       
  local identity="$1"

     

       
87
       
87
       
-
       


     

       
88
       
88
       
-
       
  if [ "x$identity" = "x" ]; then

     

       
89
       
89
       
-
       
    identity="$(git config user.identity)"

     

       
90
       
90
       
-
       
  fi

     

       
91
       
91
       
-
       


     

       
92
       
92
       
-
       
  format_raw_identity "$identity"

     

       
93
       
93
       
-
       
}

     

       
94
       
94
       
-
       


     

       
95
       
95
       
-
       
print_current_identity () {

     

       
96
       
96
       
-
       
  local identity

     

       
97
       
97
       
-
       


     

       
98
       
98
       
-
       
  identity="$(git config user.identity || echo "")"

     

       
99
       
99
       
-
       
  if [ "$identity" ]; then

     

       
100
       
100
       
-
       
    echo "Current identity: $(format_identity "$identity")"

     

       
101
       
101
       
-
       
  else

     

       
102
       
102
       
-
       
    (>&2 echo "=================================================")

     

       
103
       
103
       
-
       
    (>&2 echo -e "\033[0;31mNO IDENTITY SET\033[0m")

     

       
104
       
104
       
-
       
    (>&2 echo "Your name: $(git config user.name)")

     

       
105
       
105
       
-
       
    (>&2 echo "Your email: $(git config user.email)")

     

       
106
       
106
       
-
       
    (>&2 echo "=================================================")

     

       
107
       
107
       
-
       
    (>&2 echo "How to use this tool")

     

       
108
       
108
       
-
       
    (>&2 echo "${USAGE}")

     

       
109
       
109
       
-
       
    (>&2 echo "=================================================")

     

       
110
       
110
       
-
       
    exit 1

     

       
111
       
111
       
-
       
  fi

     

       
112
       
112
       
-
       
}

     

       
113
       
113
       
-
       


     

       
114
       
114
       
-
       
define_identity () {

     

       
115
       
115
       
-
       
  local identity="$1"

     

       
116
       
116
       
-
       
  local name="$2"

     

       
117
       
117
       
-
       
  local email="$3"

     

       
118
       
118
       
-
       


     

       
119
       
119
       
-
       
  git config --global identity."$identity".name "$name"

     

       
120
       
120
       
-
       
  git config --global identity."$identity".email "$email"

     

       
121
       
121
       
-
       
  echo "Created $(format_identity "$identity")"

     

       
122
       
122
       
-
       
}

     

       
123
       
123
       
-
       


     

       
124
       
124
       
-
       
remove_identity () {

     

       
125
       
125
       
-
       
  local identity="$1"

     

       
126
       
126
       
-
       
  local formated_identity

     

       
127
       
127
       
-
       


     

       
128
       
128
       
-
       
  formated_identity="$(format_identity "$identity")"

     

       
129
       
129
       
-
       


     

       
130
       
130
       
-
       
  git config --global --remove-section identity."$identity"

     

       
131
       
131
       
-
       
  echo "Removed $formated_identity"

     

       
132
       
132
       
-
       
}

     

       
133
       
133
       
-
       


     

       
134
       
134
       
-
       
IDENTITY="$1"

     

       
135
       
135
       
-
       


     

       
136
       
136
       
-
       
usage () {

     

       
137
       
137
       
-
       
  echo "${USAGE}"

     

       
138
       
138
       
-
       
}

     

       
139
       
139
       
-
       


     

       
140
       
140
       
-
       
check_arguments () {

     

       
141
       
141
       
-
       
  if [ "$1" -lt "$2" ]; then

     

       
142
       
142
       
-
       
    usage

     

       
143
       
143
       
-
       
    exit 1

     

       
144
       
144
       
-
       
  fi

     

       
145
       
145
       
-
       
}

     

       
146
       
146
       
-
       


     

       
147
       
147
       
-
       
case "$IDENTITY" in

     

       
148
       
148
       
-
       
  "") print_current_identity ;;

     

       
149
       
149
       
-
       


     

       
150
       
150
       
-
       
  -l|--list) list_identities ;;

     

       
151
       
151
       
-
       


     

       
152
       
152
       
-
       
  -R|--list-raw) list_raw_identities ;;

     

       
153
       
153
       
-
       


     

       
154
       
154
       
-
       
  -d|--define)

     

       
155
       
155
       
-
       
    shift

     

       
156
       
156
       
-
       
    check_arguments $# 3

     

       
157
       
157
       
-
       
    define_identity "$1" "$2" "$3"

     

       
158
       
158
       
-
       
    ;;

     

       
159
       
159
       
-
       


     

       
160
       
160
       
-
       
  -r|--remove)

     

       
161
       
161
       
-
       
    shift

     

       
162
       
162
       
-
       
    check_arguments $# 1

     

       
163
       
163
       
-
       
    remove_identity "$1"

     

       
164
       
164
       
-
       
    ;;

     

       
165
       
165
       
-
       


     

       
166
       
166
       
-
       
  -p|--print)

     

       
167
       
167
       
-
       
    shift

     

       
168
       
168
       
-
       
    print_raw_identity "$1"

     

       
169
       
169
       
-
       
    ;;

     

       
170
       
170
       
-
       


     

       
171
       
171
       
-
       
  -h|--help)

     

       
172
       
172
       
-
       
    shift

     

       
173
       
173
       
-
       
    usage

     

       
174
       
174
       
-
       
    ;;

     

       
175
       
175
       
-
       


     

       
176
       
176
       
-
       
  *) use_identity "$IDENTITY" ;;

     

       
177
       
177
       
-
       
esac

     

···

       
1
       
1
       
-
       
#!/bin/bash

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
hooks=(post-checkout post-commit post-merge pre-commit pre-push prepare-commit-msg)

     

       
4
       
4
       
-
       


     

       
5
       
5
       
-
       
usage() {

     

       
6
       
6
       
-
       
    echo "$0 [install|help]"

     

       
7
       
7
       
-
       
    echo 'Version 0.1.0'

     

       
8
       
8
       
-
       
    echo 'Copyright (c) Łukasz Niemier <opensource@niemier.pl>'

     

       
9
       
9
       
-
       
    echo

     

       
10
       
10
       
-
       
    echo 'Simple git hooks management system'

     

       
11
       
11
       
-
       
    echo

     

       
12
       
12
       
-
       
    echo 'install [hook_dir]'

     

       
13
       
13
       
-
       
    echo '    Installs hooks for given repo.'

     

       
14
       
14
       
-
       
    echo

     

       
15
       
15
       
-
       
    echo '    [hook_dir] - directory where install hooks, defaults to .git/hooks'

     

       
16
       
16
       
-
       
    echo '                 in current Git working directory'

     

       
17
       
17
       
-
       
    echo 'help'

     

       
18
       
18
       
-
       
    echo '    display this message'

     

       
19
       
19
       
-
       
    echo

     

       
20
       
20
       
-
       
    echo 'To use this as default set of hooks when creating new repo then:'

     

       
21
       
21
       
-
       
    echo

     

       
22
       
22
       
-
       
    echo "    1. Run '$0 ~/.githooks'"

     

       
23
       
23
       
-
       
    echo '    2. Run 'git config --global core.hooksPath ~/.githooks''

     

       
24
       
24
       
-
       
    echo

     

       
25
       
25
       
-
       
}

     

       
26
       
26
       
-
       


     

       
27
       
27
       
-
       
install() {

     

       
28
       
28
       
-
       
    source="${BASH_SOURCE[0]}"

     

       
29
       
29
       
-
       
    HOOK_DIR="${1:-"$(git rev-parse --show-toplevel)/.git/hooks"}"

     

       
30
       
30
       
-
       


     

       
31
       
31
       
-
       
    echo "Install handler"

     

       
32
       
32
       
-
       
    echo

     

       
33
       
33
       
-
       


     

       
34
       
34
       
-
       
    mkdir -p "$HOOK_DIR"

     

       
35
       
35
       
-
       
    cp -i "$source" "$HOOK_DIR/hook.sh"

     

       
36
       
36
       
-
       


     

       
37
       
37
       
-
       
    echo "Installing hooks"

     

       
38
       
38
       
-
       
    echo

     

       
39
       
39
       
-
       


     

       
40
       
40
       
-
       
    for hook in "${hooks[@]}"

     

       
41
       
41
       
-
       
    do

     

       
42
       
42
       
-
       
        echo "Installing $hook"

     

       
43
       
43
       
-
       
        ln -si "hook.sh" "$HOOK_DIR/$hook"

     

       
44
       
44
       
-
       
    done

     

       
45
       
45
       
-
       
}

     

       
46
       
46
       
-
       


     

       
47
       
47
       
-
       
hook() {

     

       
48
       
48
       
-
       
    script="$(basename "$0")"

     

       
49
       
49
       
-
       
    PLUG_DIRS=("$(command git config --get hooks.path)" "$GIT_DIR/hooks/hooks.d")

     

       
50
       
50
       
-
       


     

       
51
       
51
       
-
       
    test -d "$GIT_DIR"/rebase-merge -o -d "$GIT_DIR"/rebase-apply && exit 0

     

       
52
       
52
       
-
       


     

       
53
       
53
       
-
       
    input="$(mktemp)"

     

       
54
       
54
       
-
       
    touch "$input"

     

       
55
       
55
       
-
       
    trap '{ rm -f "$input"; }' EXIT

     

       
56
       
56
       
-
       
    cat - > "$input"

     

       
57
       
57
       
-
       


     

       
58
       
58
       
-
       
    for dir in "${PLUG_DIRS[@]}"

     

       
59
       
59
       
-
       
    do

     

       
60
       
60
       
-
       
        if [ -d "$dir" ]

     

       
61
       
61
       
-
       
        then

     

       
62
       
62
       
-
       
            find "$dir" -depth 2 -and -name "$script" -print0 2>/dev/null \

     

       
63
       
63
       
-
       
                | xargs -0 -n1 -I% sh -c 'input="$1"; shift; if [ -x "$1" ]; then printf "\n## $(basename "$(dirname "$1")")\n" && exec "$@" < "$input"; fi' -- "$input" % "$@"

     

       
64
       
64
       
-
       
            retval="$?"

     

       
65
       
65
       
-
       


     

       
66
       
66
       
-
       
            if [ ! "$retval" -eq 0 ]

     

       
67
       
67
       
-
       
            then

     

       
68
       
68
       
-
       
                return "$retval"

     

       
69
       
69
       
-
       
            fi

     

       
70
       
70
       
-
       
        fi

     

       
71
       
71
       
-
       
    done

     

       
72
       
72
       
-
       
}

     

       
73
       
73
       
-
       


     

       
74
       
74
       
-
       
case "$1" in

     

       
75
       
75
       
-
       
    install)

     

       
76
       
76
       
-
       
        shift

     

       
77
       
77
       
-
       
        install "$@"

     

       
78
       
78
       
-
       
        exit

     

       
79
       
79
       
-
       
        ;;

     

       
80
       
80
       
-
       
    help|-h|--help|version|-v|-V|--version)

     

       
81
       
81
       
-
       
        shift

     

       
82
       
82
       
-
       
        usage

     

       
83
       
83
       
-
       
        exit

     

       
84
       
84
       
-
       
        ;;

     

       
85
       
85
       
-
       
    *)

     

       
86
       
86
       
-
       
        hook "$@"

     

       
87
       
87
       
-
       
esac

     

···

       
1
       
1
       
-
       
#!/bin/sh

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
psql -1qXt "$@" <<EOF

     

       
4
       
4
       
-
       
\timing off

     

       
5
       
5
       
-
       


     

       
6
       
6
       
-
       
\echo 'Digraph F{'

     

       
7
       
7
       
-
       
\echo 'ranksep=1.0; rankdir=LR;'

     

       
8
       
8
       
-
       


     

       
9
       
9
       
-
       
SELECT

     

       
10
       
10
       
-
       
    '"' || tc.table_name || '"->"' || ccu.table_name || '" [label="' || tc.constraint_name || '"];'

     

       
11
       
11
       
-
       
FROM

     

       
12
       
12
       
-
       
    information_schema.table_constraints AS tc

     

       
13
       
13
       
-
       
LEFT JOIN information_schema.constraint_column_usage AS ccu

     

       
14
       
14
       
-
       
    ON ccu.constraint_name = tc.constraint_name

     

       
15
       
15
       
-
       
WHERE constraint_type = 'FOREIGN KEY';

     

       
16
       
16
       
-
       


     

       
17
       
17
       
-
       
\echo '}'

     

       
18
       
18
       
-
       
EOF

     

···

       
1
       
1
       
-
       
#!/bin/sh

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
rubocop -ao /dev/null -s - | tail -n+2

     

···

       
1
       
1
       
-
       
#!/bin/bash

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
SEP=

     

       
4
       
4
       
-
       
SEPE=

     

       
5
       
5
       
-
       


     

       
6
       
6
       
-
       
MUSIC_ICO=♫

     

       
7
       
7
       
-
       


     

       
8
       
8
       
-
       
WIDTH="${1}"

     

       
9
       
9
       
-
       


     

       
10
       
10
       
-
       
SMALL=80

     

       
11
       
11
       
-
       
MEDIUM=140

     

       
12
       
12
       
-
       


     

       
13
       
13
       
-
       
tmux-music() {

     

       
14
       
14
       
-
       
  if [ "0$WIDTH" -gt "0$MEDIUM" ]; then

     

       
15
       
15
       
-
       
    state=$(osascript -e 'tell application "iTunes" to player state as string');

     

       
16
       
16
       
-
       
    if [ $state = "playing" ]; then

     

       
17
       
17
       
-
       
      artist=$(osascsript -e 'tell application "iTunes" to artist of current track as string');

     

       
18
       
18
       
-
       
      track=$(osascript -e 'tell application "iTunes" to name of current track as string');

     

       
19
       
19
       
-
       
      echo "#[fg=colour15]$artist: $track";

     

       
20
       
20
       
-
       
    fi

     

       
21
       
21
       
-
       
  fi

     

       
22
       
22
       
-
       
}

     

       
23
       
23
       
-
       


     

       
24
       
24
       
-
       
tmux-uname() {

     

       
25
       
25
       
-
       
  if [ "0$WIDTH" -ge "0$SMALL" ]; then

     

       
26
       
26
       
-
       
    echo "#[fg=colour00,bg=colour08,nobold,noitalics,nounderscore]$SEP#[fg=colour15,bg=colour00,bold,noitalics,nounderscore] $(uname -n)"

     

       
27
       
27
       
-
       
  fi

     

       
28
       
28
       
-
       
}

     

       
29
       
29
       
-
       


     

       
30
       
30
       
-
       
DATE="#[fg=colour08,nobold,noitalics,nounderscore]$SEP#[fg=colour00,bg=colour08,nobold,noitalics,nounderscore] $(date +'%d.%m.%y')"

     

       
31
       
31
       
-
       
TIME="#[fg=colour00,bg=colour08,nobold,noitalics,nounderscore]$SEPE#[fg=colour00,bg=colour08,nobold,noitalics,nounderscore] $(date +'%H:%M')"

     

       
32
       
32
       
-
       


     

       
33
       
33
       
-
       
echo "$(tmux-music) $DATE $TIME $(tmux-uname) " | sed 's/ *$/ /g'

     

···

       
1
       
1
       
-
       
#!/usr/bin/env python

     

       
2
       
2
       
-
       
# -*- coding: utf-8 -*-

     

       
3
       
3
       
-
       
#

     

       
4
       
4
       
-
       
# vim-profiler - Utility script to profile (n)vim (e.g. startup)

     

       
5
       
5
       
-
       
# Copyright © 2015 Benjamin Chrétien

     

       
6
       
6
       
-
       
#

     

       
7
       
7
       
-
       
# This program is free software: you can redistribute it and/or modify

     

       
8
       
8
       
-
       
# it under the terms of the GNU General Public License as published by

     

       
9
       
9
       
-
       
# the Free Software Foundation, either version 3 of the License, or

     

       
10
       
10
       
-
       
# (at your option) any later version.

     

       
11
       
11
       
-
       
#

     

       
12
       
12
       
-
       
# This program is distributed in the hope that it will be useful,

     

       
13
       
13
       
-
       
# but WITHOUT ANY WARRANTY; without even the implied warranty of

     

       
14
       
14
       
-
       
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

     

       
15
       
15
       
-
       
# GNU General Public License for more details.

     

       
16
       
16
       
-
       
#

     

       
17
       
17
       
-
       
# You should have received a copy of the GNU General Public License

     

       
18
       
18
       
-
       
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

     

       
19
       
19
       
-
       


     

       
20
       
20
       
-
       
from __future__ import print_function

     

       
21
       
21
       
-
       


     

       
22
       
22
       
-
       
import os

     

       
23
       
23
       
-
       
import sys

     

       
24
       
24
       
-
       
import subprocess

     

       
25
       
25
       
-
       
import re

     

       
26
       
26
       
-
       
import csv

     

       
27
       
27
       
-
       
import operator

     

       
28
       
28
       
-
       
import argparse

     

       
29
       
29
       
-
       
import collections

     

       
30
       
30
       
-
       


     

       
31
       
31
       
-
       


     

       
32
       
32
       
-
       
def to_list(cmd):

     

       
33
       
33
       
-
       
    if not isinstance(cmd, (list, tuple)):

     

       
34
       
34
       
-
       
        cmd = cmd.split(' ')

     

       
35
       
35
       
-
       
    return cmd

     

       
36
       
36
       
-
       


     

       
37
       
37
       
-
       


     

       
38
       
38
       
-
       
def get_exe(cmd):

     

       
39
       
39
       
-
       
    # FIXME: this assumes that the first word is the executable

     

       
40
       
40
       
-
       
    return to_list(cmd)[0]

     

       
41
       
41
       
-
       


     

       
42
       
42
       
-
       


     

       
43
       
43
       
-
       
def is_subdir(paths, subdir):

     

       
44
       
44
       
-
       
    # See: http://stackoverflow.com/a/18115684/1043187

     

       
45
       
45
       
-
       
    for path in paths:

     

       
46
       
46
       
-
       
        path = os.path.realpath(path)

     

       
47
       
47
       
-
       
        subdir = os.path.realpath(subdir)

     

       
48
       
48
       
-
       
        reldir = os.path.relpath(subdir, path)

     

       
49
       
49
       
-
       
        if not (reldir == os.pardir or reldir.startswith(os.pardir + os.sep)):

     

       
50
       
50
       
-
       
            return True

     

       
51
       
51
       
-
       
    return False

     

       
52
       
52
       
-
       


     

       
53
       
53
       
-
       


     

       
54
       
54
       
-
       
def stdev(arr):

     

       
55
       
55
       
-
       
    """

     

       
56
       
56
       
-
       
    Compute the standard deviation.

     

       
57
       
57
       
-
       
    """

     

       
58
       
58
       
-
       
    if sys.version_info >= (3, 0):

     

       
59
       
59
       
-
       
        import statistics

     

       
60
       
60
       
-
       
        return statistics.pstdev(arr)

     

       
61
       
61
       
-
       
    else:

     

       
62
       
62
       
-
       
        # Dependency on NumPy

     

       
63
       
63
       
-
       
        try:

     

       
64
       
64
       
-
       
            import numpy

     

       
65
       
65
       
-
       
            return numpy.std(arr, axis=0)

     

       
66
       
66
       
-
       
        except ImportError:

     

       
67
       
67
       
-
       
            return 0.

     

       
68
       
68
       
-
       


     

       
69
       
69
       
-
       


     

       
70
       
70
       
-
       
class StartupData(object):

     

       
71
       
71
       
-
       
    """

     

       
72
       
72
       
-
       
    Data for (n)vim startup (timings etc.).

     

       
73
       
73
       
-
       
    """

     

       
74
       
74
       
-
       
    def __init__(self, cmd, log_filename, check_system=False):

     

       
75
       
75
       
-
       
        super(StartupData, self).__init__()

     

       
76
       
76
       
-
       
        self.cmd = cmd

     

       
77
       
77
       
-
       
        self.log_filename = log_filename

     

       
78
       
78
       
-
       
        self.times = dict()

     

       
79
       
79
       
-
       
        self.system_dirs = ["/usr", "/usr/local"]

     

       
80
       
80
       
-
       
        self.generate(check_system)

     

       
81
       
81
       
-
       


     

       
82
       
82
       
-
       
    def generate(self, check_system=False):

     

       
83
       
83
       
-
       
        """

     

       
84
       
84
       
-
       
        Generate startup data.

     

       
85
       
85
       
-
       
        """

     

       
86
       
86
       
-
       
        self.__run_vim()

     

       
87
       
87
       
-
       
        try:

     

       
88
       
88
       
-
       
            self.__load_times(check_system)

     

       
89
       
89
       
-
       
        except RuntimeError:

     

       
90
       
90
       
-
       
            print("\nNo plugin found. Exiting.")

     

       
91
       
91
       
-
       
            sys.exit()

     

       
92
       
92
       
-
       


     

       
93
       
93
       
-
       
        if not self.times:

     

       
94
       
94
       
-
       
            sys.exit()

     

       
95
       
95
       
-
       


     

       
96
       
96
       
-
       
    def __guess_plugin_dir(self, log_txt):

     

       
97
       
97
       
-
       
        """

     

       
98
       
98
       
-
       
        Try to guess the vim directory containing plugins.

     

       
99
       
99
       
-
       
        """

     

       
100
       
100
       
-
       
        candidates = list()

     

       
101
       
101
       
-
       


     

       
102
       
102
       
-
       
        # Get common plugin dir if any

     

       
103
       
103
       
-
       
        vim_subdirs = "autoload|ftdetect|plugin|syntax"

     

       
104
       
104
       
-
       
        matches = re.findall("^\d+.\d+\s+\d+.\d+\s+\d+.\d+: "

     

       
105
       
105
       
-
       
                             "sourcing (.+?)/(?:[^/]+/)(?:%s)/[^/]+"

     

       
106
       
106
       
-
       
                             % vim_subdirs, log_txt, re.MULTILINE)

     

       
107
       
107
       
-
       
        for plugin_dir in matches:

     

       
108
       
108
       
-
       
            # Ignore system plugins

     

       
109
       
109
       
-
       
            if not is_subdir(self.system_dirs, plugin_dir):

     

       
110
       
110
       
-
       
                candidates.append(plugin_dir)

     

       
111
       
111
       
-
       


     

       
112
       
112
       
-
       
        if candidates:

     

       
113
       
113
       
-
       
            # FIXME: the directory containing vimrc could be returned as well

     

       
114
       
114
       
-
       
            return collections.Counter(candidates).most_common(1)[0][0]

     

       
115
       
115
       
-
       
        else:

     

       
116
       
116
       
-
       
            raise RuntimeError("no user plugin found")

     

       
117
       
117
       
-
       


     

       
118
       
118
       
-
       
    def __load_times(self, check_system=False):

     

       
119
       
119
       
-
       
        """

     

       
120
       
120
       
-
       
        Load startup times for log file.

     

       
121
       
121
       
-
       
        """

     

       
122
       
122
       
-
       
        # Load log file and process it

     

       
123
       
123
       
-
       
        print("Loading and processing logs...", end="")

     

       
124
       
124
       
-
       
        with open(self.log_filename, 'r') as log:

     

       
125
       
125
       
-
       
            log_txt = log.read()

     

       
126
       
126
       
-
       
            plugin_dir = ""

     

       
127
       
127
       
-
       


     

       
128
       
128
       
-
       
            # Try to guess the folder based on the logs themselves

     

       
129
       
129
       
-
       
            try:

     

       
130
       
130
       
-
       
                plugin_dir = self.__guess_plugin_dir(log_txt)

     

       
131
       
131
       
-
       
                matches = re.findall("^\d+.\d+\s+\d+.\d+\s+(\d+.\d+): "

     

       
132
       
132
       
-
       
                                     "sourcing %s/([^/]+)/" % plugin_dir,

     

       
133
       
133
       
-
       
                                     log_txt, re.MULTILINE)

     

       
134
       
134
       
-
       
                for res in matches:

     

       
135
       
135
       
-
       
                    time = res[0]

     

       
136
       
136
       
-
       
                    plugin = res[1]

     

       
137
       
137
       
-
       
                    if plugin in self.times:

     

       
138
       
138
       
-
       
                        self.times[plugin] += float(time)

     

       
139
       
139
       
-
       
                    else:

     

       
140
       
140
       
-
       
                        self.times[plugin] = float(time)

     

       
141
       
141
       
-
       
            # Catch exception if no plugin was found

     

       
142
       
142
       
-
       
            except RuntimeError as e:

     

       
143
       
143
       
-
       
                if not check_system:

     

       
144
       
144
       
-
       
                    raise

     

       
145
       
145
       
-
       
                else:

     

       
146
       
146
       
-
       
                    plugin_dir = ""

     

       
147
       
147
       
-
       


     

       
148
       
148
       
-
       
            if check_system:

     

       
149
       
149
       
-
       
                for d in self.system_dirs:

     

       
150
       
150
       
-
       
                    matches = re.findall("^\d+.\d+\s+\d+.\d+\s+(\d+.\d+): "

     

       
151
       
151
       
-
       
                                         "sourcing %s/.+/([^/]+.vim)\n" % d,

     

       
152
       
152
       
-
       
                                         log_txt, re.MULTILINE)

     

       
153
       
153
       
-
       
                    for res in matches:

     

       
154
       
154
       
-
       
                        time = res[0]

     

       
155
       
155
       
-
       
                        plugin = "*%s" % res[1]

     

       
156
       
156
       
-
       
                        if plugin in self.times:

     

       
157
       
157
       
-
       
                            self.times[plugin] += float(time)

     

       
158
       
158
       
-
       
                        else:

     

       
159
       
159
       
-
       
                            self.times[plugin] = float(time)

     

       
160
       
160
       
-
       


     

       
161
       
161
       
-
       
        print(" done.")

     

       
162
       
162
       
-
       
        if plugin_dir:

     

       
163
       
163
       
-
       
            print("Plugin directory: %s" % plugin_dir)

     

       
164
       
164
       
-
       
        else:

     

       
165
       
165
       
-
       
            print("No user plugin found.")

     

       
166
       
166
       
-
       
        if not self.times:

     

       
167
       
167
       
-
       
            print("No system plugin found.")

     

       
168
       
168
       
-
       


     

       
169
       
169
       
-
       
    def __run_vim(self):

     

       
170
       
170
       
-
       
        """

     

       
171
       
171
       
-
       
        Run vim/nvim to generate startup logs.

     

       
172
       
172
       
-
       
        """

     

       
173
       
173
       
-
       
        print("Running %s to generate startup logs..." % get_exe(self.cmd),

     

       
174
       
174
       
-
       
              end="")

     

       
175
       
175
       
-
       
        self.__clean_log()

     

       
176
       
176
       
-
       
        full_cmd = to_list(self.cmd) + ["--startuptime", self.log_filename,

     

       
177
       
177
       
-
       
                                        "-f", "-c", "q"]

     

       
178
       
178
       
-
       
        subprocess.call(full_cmd, shell=False)

     

       
179
       
179
       
-
       
        print(" done.")

     

       
180
       
180
       
-
       


     

       
181
       
181
       
-
       
    def __clean_log(self):

     

       
182
       
182
       
-
       
        """

     

       
183
       
183
       
-
       
        Clean log file.

     

       
184
       
184
       
-
       
        """

     

       
185
       
185
       
-
       
        if os.path.isfile(self.log_filename):

     

       
186
       
186
       
-
       
            os.remove(self.log_filename)

     

       
187
       
187
       
-
       


     

       
188
       
188
       
-
       
    def __del__(self):

     

       
189
       
189
       
-
       
        """

     

       
190
       
190
       
-
       
        Destructor taking care of clean up.

     

       
191
       
191
       
-
       
        """

     

       
192
       
192
       
-
       
        self.__clean_log()

     

       
193
       
193
       
-
       


     

       
194
       
194
       
-
       


     

       
195
       
195
       
-
       
class StartupAnalyzer(object):

     

       
196
       
196
       
-
       
    """

     

       
197
       
197
       
-
       
    Analyze startup times for (n)vim.

     

       
198
       
198
       
-
       
    """

     

       
199
       
199
       
-
       
    def __init__(self, param):

     

       
200
       
200
       
-
       
        super(StartupAnalyzer, self).__init__()

     

       
201
       
201
       
-
       
        self.runs = param.runs

     

       
202
       
202
       
-
       
        self.cmd = param.cmd

     

       
203
       
203
       
-
       
        self.raw_data = [StartupData(self.cmd, "vim_%i.log" % (i+1),

     

       
204
       
204
       
-
       
                                     check_system=param.check_system)

     

       
205
       
205
       
-
       
                         for i in range(self.runs)]

     

       
206
       
206
       
-
       
        self.data = self.process_data()

     

       
207
       
207
       
-
       


     

       
208
       
208
       
-
       
    def process_data(self):

     

       
209
       
209
       
-
       
        """

     

       
210
       
210
       
-
       
        Merge startup times for each plugin.

     

       
211
       
211
       
-
       
        """

     

       
212
       
212
       
-
       
        return {k: [d.times[k] for d in self.raw_data]

     

       
213
       
213
       
-
       
                for k in self.raw_data[0].times.keys()}

     

       
214
       
214
       
-
       


     

       
215
       
215
       
-
       
    def average_data(self):

     

       
216
       
216
       
-
       
        """

     

       
217
       
217
       
-
       
        Return average times for each plugin.

     

       
218
       
218
       
-
       
        """

     

       
219
       
219
       
-
       
        return {k: sum(v)/len(v) for k, v in self.data.items()}

     

       
220
       
220
       
-
       


     

       
221
       
221
       
-
       
    def stdev_data(self):

     

       
222
       
222
       
-
       
        """

     

       
223
       
223
       
-
       
        Return standard deviation for each plugin.

     

       
224
       
224
       
-
       
        """

     

       
225
       
225
       
-
       
        return {k: stdev(v) for k, v in self.data.items()}

     

       
226
       
226
       
-
       


     

       
227
       
227
       
-
       
    def plot(self):

     

       
228
       
228
       
-
       
        """

     

       
229
       
229
       
-
       
        Plot startup data.

     

       
230
       
230
       
-
       
        """

     

       
231
       
231
       
-
       
        import pylab

     

       
232
       
232
       
-
       


     

       
233
       
233
       
-
       
        print("Plotting result...", end="")

     

       
234
       
234
       
-
       
        avg_data = self.average_data()

     

       
235
       
235
       
-
       
        avg_data = self.__sort_data(avg_data, False)

     

       
236
       
236
       
-
       
        if len(self.raw_data) > 1:

     

       
237
       
237
       
-
       
            err = self.stdev_data()

     

       
238
       
238
       
-
       
            sorted_err = [err[k] for k in list(zip(*avg_data))[0]]

     

       
239
       
239
       
-
       
        else:

     

       
240
       
240
       
-
       
            sorted_err = None

     

       
241
       
241
       
-
       
        pylab.barh(range(len(avg_data)), list(zip(*avg_data))[1],

     

       
242
       
242
       
-
       
                   xerr=sorted_err, align='center', alpha=0.4)

     

       
243
       
243
       
-
       
        pylab.yticks(range(len(avg_data)), list(zip(*avg_data))[0])

     

       
244
       
244
       
-
       
        pylab.xlabel("Average startup time (ms)")

     

       
245
       
245
       
-
       
        pylab.ylabel("Plugins")

     

       
246
       
246
       
-
       
        pylab.show()

     

       
247
       
247
       
-
       
        print(" done.")

     

       
248
       
248
       
-
       


     

       
249
       
249
       
-
       
    def export(self, output_filename="result.csv"):

     

       
250
       
250
       
-
       
        """

     

       
251
       
251
       
-
       
        Write sorted result to file.

     

       
252
       
252
       
-
       
        """

     

       
253
       
253
       
-
       
        assert len(self.data) > 0

     

       
254
       
254
       
-
       
        print("Writing result to %s..." % output_filename, end="")

     

       
255
       
255
       
-
       
        with open(output_filename, 'w') as fp:

     

       
256
       
256
       
-
       
            writer = csv.writer(fp, delimiter='\t')

     

       
257
       
257
       
-
       
            # Compute average times

     

       
258
       
258
       
-
       
            avg_data = self.average_data()

     

       
259
       
259
       
-
       
            # Sort by average time

     

       
260
       
260
       
-
       
            for name, avg_time in self.__sort_data(avg_data):

     

       
261
       
261
       
-
       
                writer.writerow(["%.3f" % avg_time, name])

     

       
262
       
262
       
-
       
        print(" done.")

     

       
263
       
263
       
-
       


     

       
264
       
264
       
-
       
    def print_summary(self, n):

     

       
265
       
265
       
-
       
        """

     

       
266
       
266
       
-
       
        Print summary of startup times for plugins.

     

       
267
       
267
       
-
       
        """

     

       
268
       
268
       
-
       
        title = "Top %i plugins slowing %s's startup" % (n, get_exe(self.cmd))

     

       
269
       
269
       
-
       
        length = len(title)

     

       
270
       
270
       
-
       
        print(''.center(length, '='))

     

       
271
       
271
       
-
       
        print(title)

     

       
272
       
272
       
-
       
        print(''.center(length, '='))

     

       
273
       
273
       
-
       


     

       
274
       
274
       
-
       
        # Compute average times

     

       
275
       
275
       
-
       
        avg_data = self.average_data()

     

       
276
       
276
       
-
       
        # Sort by average time

     

       
277
       
277
       
-
       
        rank = 0

     

       
278
       
278
       
-
       
        for name, time in self.__sort_data(avg_data)[:n]:

     

       
279
       
279
       
-
       
            rank += 1

     

       
280
       
280
       
-
       
            print("%i\t%7.3f   %s" % (rank, time, name))

     

       
281
       
281
       
-
       


     

       
282
       
282
       
-
       
        print(''.center(length, '='))

     

       
283
       
283
       
-
       


     

       
284
       
284
       
-
       
    @staticmethod

     

       
285
       
285
       
-
       
    def __sort_data(d, reverse=True):

     

       
286
       
286
       
-
       
        """

     

       
287
       
287
       
-
       
        Sort data by decreasing time.

     

       
288
       
288
       
-
       
        """

     

       
289
       
289
       
-
       
        return sorted(d.items(), key=operator.itemgetter(1), reverse=reverse)

     

       
290
       
290
       
-
       


     

       
291
       
291
       
-
       


     

       
292
       
292
       
-
       
def main():

     

       
293
       
293
       
-
       
    parser = argparse.ArgumentParser(

     

       
294
       
294
       
-
       
            description='Analyze startup times of vim/neovim plugins.')

     

       
295
       
295
       
-
       
    parser.add_argument("-o", dest="csv", type=str,

     

       
296
       
296
       
-
       
                        help="Export result to a csv file")

     

       
297
       
297
       
-
       
    parser.add_argument("-p", dest="plot", action='store_true',

     

       
298
       
298
       
-
       
                        help="Plot result as a bar chart")

     

       
299
       
299
       
-
       
    parser.add_argument("-s", dest="check_system", action='store_true',

     

       
300
       
300
       
-
       
                        help="Consider system plugins as well (marked with *)")

     

       
301
       
301
       
-
       
    parser.add_argument("-n", dest="n", type=int, default=10,

     

       
302
       
302
       
-
       
                        help="Number of plugins to list in the summary")

     

       
303
       
303
       
-
       
    parser.add_argument("-r", dest="runs", type=int, default=1,

     

       
304
       
304
       
-
       
                        help="Number of runs (for average/standard deviation)")

     

       
305
       
305
       
-
       
    parser.add_argument(dest="cmd", nargs=argparse.REMAINDER, type=str,

     

       
306
       
306
       
-
       
                        help="vim/neovim executable or command")

     

       
307
       
307
       
-
       


     

       
308
       
308
       
-
       
    # Parse CLI arguments

     

       
309
       
309
       
-
       
    args = parser.parse_args()

     

       
310
       
310
       
-
       
    output_filename = args.csv

     

       
311
       
311
       
-
       
    n = args.n

     

       
312
       
312
       
-
       


     

       
313
       
313
       
-
       
    # Command (default = vim)

     

       
314
       
314
       
-
       
    if args.cmd == []:

     

       
315
       
315
       
-
       
        args.cmd = "vim"

     

       
316
       
316
       
-
       


     

       
317
       
317
       
-
       
    # Run analysis

     

       
318
       
318
       
-
       
    analyzer = StartupAnalyzer(args)

     

       
319
       
319
       
-
       
    if n > 0:

     

       
320
       
320
       
-
       
        analyzer.print_summary(n)

     

       
321
       
321
       
-
       
    if output_filename is not None:

     

       
322
       
322
       
-
       
        analyzer.export(output_filename)

     

       
323
       
323
       
-
       
    if args.plot:

     

       
324
       
324
       
-
       
        analyzer.plot()

     

       
325
       
325
       
-
       


     

       
326
       
326
       
-
       
if __name__ == "__main__":

     

       
327
       
327
       
-
       
    main()

     

···

       
1
       
1
       
 
       
*.key

     

       
2
       
2
       
 
       
*.csr

     

       
3
       
3
       
+
       
*.crt

     

       
3
       
4
       
 
       
*.pem

     

···

       
1
       
1
       
-
       
PRIV_KEY = private.key

     

       
2
       
2
       
-
       
CERT     = cert.csr

     

       
1
       
1
       
+
       
NAME     ?= localhost

     

       
2
       
2
       
+
       
DOMAIN   ?= localhost

     

       
3
       
3
       
+
       


     

       
4
       
4
       
+
       
KEY      ?= ${NAME}.key

     

       
5
       
5
       
+
       
SIGN_REQ ?= ${NAME}.csr

     

       
6
       
6
       
+
       
CERT     ?= ${NAME}.crt

     

       
7
       
7
       
+
       


     

       
8
       
8
       
+
       
SUBJECT = "/C=US/ST=Connecticut/O=/localityName=New Haven/commonName=${DOMAIN}/commonName=*.${DOMAIN}/organizationalUnitName=/emailAddress=/"

     

       
3
       
9
       
 
       


     

       
4
       
10
       
 
       
all: ${CERT}

     

       
5
       
11
       
 
       


     

       
6
       
6
       
-
       
clean:

     

       
7
       
7
       
-
       
	$(RM) -rf ${PRIV_KEY} ${CERT}

     

       
12
       
12
       
+
       
install: all

     

       
13
       
13
       
+
       
	security import ${CERT}

     

       
14
       
14
       
+
       
	security add-trusted-cert ${CERT}

     

       
15
       
15
       
+
       


     

       
16
       
16
       
+
       
clea:

     

       
17
       
17
       
+
       
	$(RM) -rf ${KEY} ${CERT} ${SIGN_REQ}

     

       
8
       
18
       
 
       


     

       
9
       
19
       
 
       
verify: ${CERT}

     

       
10
       
20
       
 
       
	openssl x509 -noout -text -in $<

     

       
11
       
21
       
 
       


     

       
12
       
12
       
-
       
${PRIV_KEY}:

     

       
13
       
13
       
-
       
	openssl genrsa -out $@ 2048

     

       
22
       
22
       
+
       
${KEY}:

     

       
23
       
23
       
+
       
	openssl genrsa -out "$@" 2048

     

       
24
       
24
       
+
       


     

       
25
       
25
       
+
       
${SIGN_REQ}: ${KEY}

     

       
26
       
26
       
+
       
	openssl req -new -sha256 -subj $(SUBJECT) -key "$<" -out "$@" -passin pass:""

     

       
14
       
27
       
 
       


     

       
15
       
15
       
-
       
${CERT}: self-signed.conf ${PRIV_KEY}

     

       
16
       
16
       
-
       
	openssl req -config $< -new -x509 -sha256 -key ${PRIV_KEY} -days 3650 -out $@ -subj "/C=US/ST=California/L=San Francisco/O=My Company, Inc./CN=localhost/"

     

       
28
       
28
       
+
       
${CERT}: ${SIGN_REQ} ${KEY}

     

       
29
       
29
       
+
       
	openssl x509 -req -days 365 -in "${SIGN_REQ}" -signkey "${KEY}" -out "$@"

     

       
17
       
30
       
 
       


     

       
18
       
18
       
-
       
.PHONY: all clean verify

     

       
31
       
31
       
+
       
.PHONY: all clean verify install

     

···

       
1
       
1
       
-
       
#

     

       
2
       
2
       
-
       
# OpenSSL example configuration file.

     

       
3
       
3
       
-
       
# This is mostly being used for generation of certificate requests.

     

       
4
       
4
       
-
       
#

     

       
5
       
5
       
-
       


     

       
6
       
6
       
-
       
# This definition stops the following lines choking if HOME isn't

     

       
7
       
7
       
-
       
# defined.

     

       
8
       
8
       
-
       
HOME			= .

     

       
9
       
9
       
-
       
RANDFILE		= $ENV::HOME/.rnd

     

       
10
       
10
       
-
       


     

       
11
       
11
       
-
       
# Extra OBJECT IDENTIFIER info:

     

       
12
       
12
       
-
       
#oid_file		= $ENV::HOME/.oid

     

       
13
       
13
       
-
       
oid_section		= new_oids

     

       
14
       
14
       
-
       


     

       
15
       
15
       
-
       
# To use this configuration file with the "-extfile" option of the

     

       
16
       
16
       
-
       
# "openssl x509" utility, name here the section containing the

     

       
17
       
17
       
-
       
# X.509v3 extensions to use:

     

       
18
       
18
       
-
       
# extensions		=

     

       
19
       
19
       
-
       
# (Alternatively, use a configuration file that has only

     

       
20
       
20
       
-
       
# X.509v3 extensions in its main [= default] section.)

     

       
21
       
21
       
-
       


     

       
22
       
22
       
-
       
[ new_oids ]

     

       
23
       
23
       
-
       


     

       
24
       
24
       
-
       
# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.

     

       
25
       
25
       
-
       
# Add a simple OID like this:

     

       
26
       
26
       
-
       
# testoid1=1.2.3.4

     

       
27
       
27
       
-
       
# Or use config file substitution like this:

     

       
28
       
28
       
-
       
# testoid2=${testoid1}.5.6

     

       
29
       
29
       
-
       


     

       
30
       
30
       
-
       
# Policies used by the TSA examples.

     

       
31
       
31
       
-
       
tsa_policy1 = 1.2.3.4.1

     

       
32
       
32
       
-
       
tsa_policy2 = 1.2.3.4.5.6

     

       
33
       
33
       
-
       
tsa_policy3 = 1.2.3.4.5.7

     

       
34
       
34
       
-
       


     

       
35
       
35
       
-
       
####################################################################

     

       
36
       
36
       
-
       
[ ca ]

     

       
37
       
37
       
-
       
default_ca	= CA_default		# The default ca section

     

       
38
       
38
       
-
       


     

       
39
       
39
       
-
       
####################################################################

     

       
40
       
40
       
-
       
[ CA_default ]

     

       
41
       
41
       
-
       


     

       
42
       
42
       
-
       
dir		= ./demoCA		# Where everything is kept

     

       
43
       
43
       
-
       
certs		= $dir/certs		# Where the issued certs are kept

     

       
44
       
44
       
-
       
crl_dir		= $dir/crl		# Where the issued crl are kept

     

       
45
       
45
       
-
       
database	= $dir/index.txt	# database index file.

     

       
46
       
46
       
-
       
#unique_subject	= no			# Set to 'no' to allow creation of

     

       
47
       
47
       
-
       
					# several ctificates with same subject.

     

       
48
       
48
       
-
       
new_certs_dir	= $dir/newcerts		# default place for new certs.

     

       
49
       
49
       
-
       


     

       
50
       
50
       
-
       
certificate	= $dir/cacert.pem 	# The CA certificate

     

       
51
       
51
       
-
       
serial		= $dir/serial 		# The current serial number

     

       
52
       
52
       
-
       
crlnumber	= $dir/crlnumber	# the current crl number

     

       
53
       
53
       
-
       
					# must be commented out to leave a V1 CRL

     

       
54
       
54
       
-
       
crl		= $dir/crl.pem 		# The current CRL

     

       
55
       
55
       
-
       
private_key	= $dir/private/cakey.pem# The private key

     

       
56
       
56
       
-
       
RANDFILE	= $dir/private/.rand	# private random number file

     

       
57
       
57
       
-
       


     

       
58
       
58
       
-
       
x509_extensions	= usr_cert		# The extentions to add to the cert

     

       
59
       
59
       
-
       


     

       
60
       
60
       
-
       
# Comment out the following two lines for the "traditional"

     

       
61
       
61
       
-
       
# (and highly broken) format.

     

       
62
       
62
       
-
       
name_opt 	= ca_default		# Subject Name options

     

       
63
       
63
       
-
       
cert_opt 	= ca_default		# Certificate field options

     

       
64
       
64
       
-
       


     

       
65
       
65
       
-
       
# Extension copying option: use with caution.

     

       
66
       
66
       
-
       
# copy_extensions = copy

     

       
67
       
67
       
-
       


     

       
68
       
68
       
-
       
# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs

     

       
69
       
69
       
-
       
# so this is commented out by default to leave a V1 CRL.

     

       
70
       
70
       
-
       
# crlnumber must also be commented out to leave a V1 CRL.

     

       
71
       
71
       
-
       
# crl_extensions	= crl_ext

     

       
72
       
72
       
-
       


     

       
73
       
73
       
-
       
default_days	= 365			# how long to certify for

     

       
74
       
74
       
-
       
default_crl_days= 30			# how long before next CRL

     

       
75
       
75
       
-
       
default_md	= default		# use public key default MD

     

       
76
       
76
       
-
       
preserve	= no			# keep passed DN ordering

     

       
77
       
77
       
-
       


     

       
78
       
78
       
-
       
# A few difference way of specifying how similar the request should look

     

       
79
       
79
       
-
       
# For type CA, the listed attributes must be the same, and the optional

     

       
80
       
80
       
-
       
# and supplied fields are just that :-)

     

       
81
       
81
       
-
       
policy		= policy_match

     

       
82
       
82
       
-
       


     

       
83
       
83
       
-
       
# For the CA policy

     

       
84
       
84
       
-
       
[ policy_match ]

     

       
85
       
85
       
-
       
countryName		= match

     

       
86
       
86
       
-
       
stateOrProvinceName	= match

     

       
87
       
87
       
-
       
organizationName	= match

     

       
88
       
88
       
-
       
organizationalUnitName	= optional

     

       
89
       
89
       
-
       
commonName		= supplied

     

       
90
       
90
       
-
       
emailAddress		= optional

     

       
91
       
91
       
-
       


     

       
92
       
92
       
-
       
# For the 'anything' policy

     

       
93
       
93
       
-
       
# At this point in time, you must list all acceptable 'object'

     

       
94
       
94
       
-
       
# types.

     

       
95
       
95
       
-
       
[ policy_anything ]

     

       
96
       
96
       
-
       
countryName		= optional

     

       
97
       
97
       
-
       
stateOrProvinceName	= optional

     

       
98
       
98
       
-
       
localityName		= optional

     

       
99
       
99
       
-
       
organizationName	= optional

     

       
100
       
100
       
-
       
organizationalUnitName	= optional

     

       
101
       
101
       
-
       
commonName		= supplied

     

       
102
       
102
       
-
       
emailAddress		= optional

     

       
103
       
103
       
-
       


     

       
104
       
104
       
-
       
####################################################################

     

       
105
       
105
       
-
       
[ req ]

     

       
106
       
106
       
-
       
default_bits		= 2048

     

       
107
       
107
       
-
       
default_keyfile 	= privkey.pem

     

       
108
       
108
       
-
       
distinguished_name	= req_distinguished_name

     

       
109
       
109
       
-
       
attributes		= req_attributes

     

       
110
       
110
       
-
       
x509_extensions	= v3_ca	# The extentions to add to the self signed cert

     

       
111
       
111
       
-
       


     

       
112
       
112
       
-
       
# Passwords for private keys if not present they will be prompted for

     

       
113
       
113
       
-
       
# input_password = secret

     

       
114
       
114
       
-
       
# output_password = secret

     

       
115
       
115
       
-
       


     

       
116
       
116
       
-
       
# This sets a mask for permitted string types. There are several options.

     

       
117
       
117
       
-
       
# default: PrintableString, T61String, BMPString.

     

       
118
       
118
       
-
       
# pkix	 : PrintableString, BMPString (PKIX recommendation before 2004)

     

       
119
       
119
       
-
       
# utf8only: only UTF8Strings (PKIX recommendation after 2004).

     

       
120
       
120
       
-
       
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).

     

       
121
       
121
       
-
       
# MASK:XXXX a literal mask value.

     

       
122
       
122
       
-
       
# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.

     

       
123
       
123
       
-
       
string_mask = utf8only

     

       
124
       
124
       
-
       


     

       
125
       
125
       
-
       
# req_extensions = v3_req # The extensions to add to a certificate request

     

       
126
       
126
       
-
       


     

       
127
       
127
       
-
       
[ req_distinguished_name ]

     

       
128
       
128
       
-
       
countryName			= Country Name (2 letter code)

     

       
129
       
129
       
-
       
countryName_default		= AU

     

       
130
       
130
       
-
       
countryName_min			= 2

     

       
131
       
131
       
-
       
countryName_max			= 2

     

       
132
       
132
       
-
       


     

       
133
       
133
       
-
       
stateOrProvinceName		= State or Province Name (full name)

     

       
134
       
134
       
-
       
stateOrProvinceName_default	= Some-State

     

       
135
       
135
       
-
       


     

       
136
       
136
       
-
       
localityName			= Locality Name (eg, city)

     

       
137
       
137
       
-
       


     

       
138
       
138
       
-
       
0.organizationName		= Organization Name (eg, company)

     

       
139
       
139
       
-
       
0.organizationName_default	= Internet Widgits Pty Ltd

     

       
140
       
140
       
-
       


     

       
141
       
141
       
-
       
# we can do this but it is not needed normally :-)

     

       
142
       
142
       
-
       
#1.organizationName		= Second Organization Name (eg, company)

     

       
143
       
143
       
-
       
#1.organizationName_default	= World Wide Web Pty Ltd

     

       
144
       
144
       
-
       


     

       
145
       
145
       
-
       
organizationalUnitName		= Organizational Unit Name (eg, section)

     

       
146
       
146
       
-
       
#organizationalUnitName_default	=

     

       
147
       
147
       
-
       


     

       
148
       
148
       
-
       
commonName			= Common Name (e.g. server FQDN or YOUR name)

     

       
149
       
149
       
-
       
commonName_max			= 64

     

       
150
       
150
       
-
       


     

       
151
       
151
       
-
       
emailAddress			= Email Address

     

       
152
       
152
       
-
       
emailAddress_max		= 64

     

       
153
       
153
       
-
       


     

       
154
       
154
       
-
       
# SET-ex3			= SET extension number 3

     

       
155
       
155
       
-
       


     

       
156
       
156
       
-
       
[ req_attributes ]

     

       
157
       
157
       
-
       
challengePassword		= A challenge password

     

       
158
       
158
       
-
       
challengePassword_min		= 4

     

       
159
       
159
       
-
       
challengePassword_max		= 20

     

       
160
       
160
       
-
       


     

       
161
       
161
       
-
       
unstructuredName		= An optional company name

     

       
162
       
162
       
-
       


     

       
163
       
163
       
-
       
[ usr_cert ]

     

       
164
       
164
       
-
       


     

       
165
       
165
       
-
       
# These extensions are added when 'ca' signs a request.

     

       
166
       
166
       
-
       


     

       
167
       
167
       
-
       
# This goes against PKIX guidelines but some CAs do it and some software

     

       
168
       
168
       
-
       
# requires this to avoid interpreting an end user certificate as a CA.

     

       
169
       
169
       
-
       


     

       
170
       
170
       
-
       
basicConstraints=CA:FALSE

     

       
171
       
171
       
-
       


     

       
172
       
172
       
-
       
# Here are some examples of the usage of nsCertType. If it is omitted

     

       
173
       
173
       
-
       
# the certificate can be used for anything *except* object signing.

     

       
174
       
174
       
-
       


     

       
175
       
175
       
-
       
# This is OK for an SSL server.

     

       
176
       
176
       
-
       
# nsCertType			= server

     

       
177
       
177
       
-
       


     

       
178
       
178
       
-
       
# For an object signing certificate this would be used.

     

       
179
       
179
       
-
       
# nsCertType = objsign

     

       
180
       
180
       
-
       


     

       
181
       
181
       
-
       
# For normal client use this is typical

     

       
182
       
182
       
-
       
# nsCertType = client, email

     

       
183
       
183
       
-
       


     

       
184
       
184
       
-
       
# and for everything including object signing:

     

       
185
       
185
       
-
       
# nsCertType = client, email, objsign

     

       
186
       
186
       
-
       


     

       
187
       
187
       
-
       
# This is typical in keyUsage for a client certificate.

     

       
188
       
188
       
-
       
# keyUsage = nonRepudiation, digitalSignature, keyEncipherment

     

       
189
       
189
       
-
       


     

       
190
       
190
       
-
       
# This will be displayed in Netscape's comment listbox.

     

       
191
       
191
       
-
       
nsComment			= "OpenSSL Generated Certificate"

     

       
192
       
192
       
-
       


     

       
193
       
193
       
-
       
# PKIX recommendations harmless if included in all certificates.

     

       
194
       
194
       
-
       
subjectKeyIdentifier=hash

     

       
195
       
195
       
-
       
authorityKeyIdentifier=keyid,issuer

     

       
196
       
196
       
-
       


     

       
197
       
197
       
-
       
# This stuff is for subjectAltName and issuerAltname.

     

       
198
       
198
       
-
       
# Import the email address.

     

       
199
       
199
       
-
       
# subjectAltName=email:copy

     

       
200
       
200
       
-
       
# An alternative to produce certificates that aren't

     

       
201
       
201
       
-
       
# deprecated according to PKIX.

     

       
202
       
202
       
-
       
# subjectAltName=email:move

     

       
203
       
203
       
-
       


     

       
204
       
204
       
-
       
# Copy subject details

     

       
205
       
205
       
-
       
# issuerAltName=issuer:copy

     

       
206
       
206
       
-
       


     

       
207
       
207
       
-
       
#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem

     

       
208
       
208
       
-
       
#nsBaseUrl

     

       
209
       
209
       
-
       
#nsRevocationUrl

     

       
210
       
210
       
-
       
#nsRenewalUrl

     

       
211
       
211
       
-
       
#nsCaPolicyUrl

     

       
212
       
212
       
-
       
#nsSslServerName

     

       
213
       
213
       
-
       


     

       
214
       
214
       
-
       
# This is required for TSA certificates.

     

       
215
       
215
       
-
       
# extendedKeyUsage = critical,timeStamping

     

       
216
       
216
       
-
       


     

       
217
       
217
       
-
       
[ v3_req ]

     

       
218
       
218
       
-
       


     

       
219
       
219
       
-
       
# Extensions to add to a certificate request

     

       
220
       
220
       
-
       


     

       
221
       
221
       
-
       
basicConstraints = CA:FALSE

     

       
222
       
222
       
-
       
keyUsage = nonRepudiation, digitalSignature, keyEncipherment

     

       
223
       
223
       
-
       


     

       
224
       
224
       
-
       
[ v3_ca ]

     

       
225
       
225
       
-
       


     

       
226
       
226
       
-
       


     

       
227
       
227
       
-
       
# Extensions for a typical CA

     

       
228
       
228
       
-
       


     

       
229
       
229
       
-
       


     

       
230
       
230
       
-
       
# PKIX recommendation.

     

       
231
       
231
       
-
       


     

       
232
       
232
       
-
       
subjectKeyIdentifier=hash

     

       
233
       
233
       
-
       


     

       
234
       
234
       
-
       
authorityKeyIdentifier=keyid:always,issuer

     

       
235
       
235
       
-
       


     

       
236
       
236
       
-
       
# This is what PKIX recommends but some broken software chokes on critical

     

       
237
       
237
       
-
       
# extensions.

     

       
238
       
238
       
-
       
#basicConstraints = critical,CA:true

     

       
239
       
239
       
-
       
# So we do this instead.

     

       
240
       
240
       
-
       
basicConstraints = CA:true

     

       
241
       
241
       
-
       


     

       
242
       
242
       
-
       
# Key usage: this is typical for a CA certificate. However since it will

     

       
243
       
243
       
-
       
# prevent it being used as an test self-signed certificate it is best

     

       
244
       
244
       
-
       
# left out by default.

     

       
245
       
245
       
-
       
# keyUsage = cRLSign, keyCertSign

     

       
246
       
246
       
-
       


     

       
247
       
247
       
-
       
# Some might want this also

     

       
248
       
248
       
-
       
# nsCertType = sslCA, emailCA

     

       
249
       
249
       
-
       


     

       
250
       
250
       
-
       
# Include email address in subject alt name: another PKIX recommendation

     

       
251
       
251
       
-
       
# subjectAltName=email:copy

     

       
252
       
252
       
-
       
# Copy issuer details

     

       
253
       
253
       
-
       
# issuerAltName=issuer:copy

     

       
254
       
254
       
-
       


     

       
255
       
255
       
-
       
# DER hex encoding of an extension: beware experts only!

     

       
256
       
256
       
-
       
# obj=DER:02:03

     

       
257
       
257
       
-
       
# Where 'obj' is a standard or added object

     

       
258
       
258
       
-
       
# You can even override a supported extension:

     

       
259
       
259
       
-
       
# basicConstraints= critical, DER:30:03:01:01:FF

     

       
260
       
260
       
-
       


     

       
261
       
261
       
-
       
subjectAltName = @alt_names

     

       
262
       
262
       
-
       
[alt_names]

     

       
263
       
263
       
-
       
DNS.1 = *.localhost

     

       
264
       
264
       
-
       
DNS.2 = *.*.localhost

     

       
265
       
265
       
-
       


     

       
266
       
266
       
-
       
[ crl_ext ]

     

       
267
       
267
       
-
       


     

       
268
       
268
       
-
       
# CRL extensions.

     

       
269
       
269
       
-
       
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.

     

       
270
       
270
       
-
       


     

       
271
       
271
       
-
       
# issuerAltName=issuer:copy

     

       
272
       
272
       
-
       
authorityKeyIdentifier=keyid:always

     

       
273
       
273
       
-
       


     

       
274
       
274
       
-
       
[ proxy_cert_ext ]

     

       
275
       
275
       
-
       
# These extensions should be added when creating a proxy certificate

     

       
276
       
276
       
-
       


     

       
277
       
277
       
-
       
# This goes against PKIX guidelines but some CAs do it and some software

     

       
278
       
278
       
-
       
# requires this to avoid interpreting an end user certificate as a CA.

     

       
279
       
279
       
-
       


     

       
280
       
280
       
-
       
basicConstraints=CA:FALSE

     

       
281
       
281
       
-
       


     

       
282
       
282
       
-
       
# Here are some examples of the usage of nsCertType. If it is omitted

     

       
283
       
283
       
-
       
# the certificate can be used for anything *except* object signing.

     

       
284
       
284
       
-
       


     

       
285
       
285
       
-
       
# This is OK for an SSL server.

     

       
286
       
286
       
-
       
# nsCertType			= server

     

       
287
       
287
       
-
       


     

       
288
       
288
       
-
       
# For an object signing certificate this would be used.

     

       
289
       
289
       
-
       
# nsCertType = objsign

     

       
290
       
290
       
-
       


     

       
291
       
291
       
-
       
# For normal client use this is typical

     

       
292
       
292
       
-
       
# nsCertType = client, email

     

       
293
       
293
       
-
       


     

       
294
       
294
       
-
       
# and for everything including object signing:

     

       
295
       
295
       
-
       
# nsCertType = client, email, objsign

     

       
296
       
296
       
-
       


     

       
297
       
297
       
-
       
# This is typical in keyUsage for a client certificate.

     

       
298
       
298
       
-
       
# keyUsage = nonRepudiation, digitalSignature, keyEncipherment

     

       
299
       
299
       
-
       


     

       
300
       
300
       
-
       
# This will be displayed in Netscape's comment listbox.

     

       
301
       
301
       
-
       
nsComment			= "OpenSSL Generated Certificate"

     

       
302
       
302
       
-
       


     

       
303
       
303
       
-
       
# PKIX recommendations harmless if included in all certificates.

     

       
304
       
304
       
-
       
subjectKeyIdentifier=hash

     

       
305
       
305
       
-
       
authorityKeyIdentifier=keyid,issuer

     

       
306
       
306
       
-
       


     

       
307
       
307
       
-
       
# This stuff is for subjectAltName and issuerAltname.

     

       
308
       
308
       
-
       
# Import the email address.

     

       
309
       
309
       
-
       
# subjectAltName=email:copy

     

       
310
       
310
       
-
       
# An alternative to produce certificates that aren't

     

       
311
       
311
       
-
       
# deprecated according to PKIX.

     

       
312
       
312
       
-
       
# subjectAltName=email:move

     

       
313
       
313
       
-
       


     

       
314
       
314
       
-
       
# Copy subject details

     

       
315
       
315
       
-
       
# issuerAltName=issuer:copy

     

       
316
       
316
       
-
       


     

       
317
       
317
       
-
       
#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem

     

       
318
       
318
       
-
       
#nsBaseUrl

     

       
319
       
319
       
-
       
#nsRevocationUrl

     

       
320
       
320
       
-
       
#nsRenewalUrl

     

       
321
       
321
       
-
       
#nsCaPolicyUrl

     

       
322
       
322
       
-
       
#nsSslServerName

     

       
323
       
323
       
-
       


     

       
324
       
324
       
-
       
# This really needs to be in place for it to be a proxy certificate.

     

       
325
       
325
       
-
       
proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo

     

       
326
       
326
       
-
       


     

       
327
       
327
       
-
       
####################################################################

     

       
328
       
328
       
-
       
[ tsa ]

     

       
329
       
329
       
-
       


     

       
330
       
330
       
-
       
default_tsa = tsa_config1	# the default TSA section

     

       
331
       
331
       
-
       


     

       
332
       
332
       
-
       
[ tsa_config1 ]

     

       
333
       
333
       
-
       


     

       
334
       
334
       
-
       
# These are used by the TSA reply generation only.

     

       
335
       
335
       
-
       
dir		= ./demoCA		# TSA root directory

     

       
336
       
336
       
-
       
serial		= $dir/tsaserial	# The current serial number (mandatory)

     

       
337
       
337
       
-
       
crypto_device	= builtin		# OpenSSL engine to use for signing

     

       
338
       
338
       
-
       
signer_cert	= $dir/tsacert.pem 	# The TSA signing certificate

     

       
339
       
339
       
-
       
					# (optional)

     

       
340
       
340
       
-
       
certs		= $dir/cacert.pem	# Certificate chain to include in reply

     

       
341
       
341
       
-
       
					# (optional)

     

       
342
       
342
       
-
       
signer_key	= $dir/private/tsakey.pem # The TSA private key (optional)

     

       
343
       
343
       
-
       


     

       
344
       
344
       
-
       
default_policy	= tsa_policy1		# Policy if request did not specify it

     

       
345
       
345
       
-
       
					# (optional)

     

       
346
       
346
       
-
       
other_policies	= tsa_policy2, tsa_policy3	# acceptable policies (optional)

     

       
347
       
347
       
-
       
digests		= md5, sha1		# Acceptable message digests (mandatory)

     

       
348
       
348
       
-
       
accuracy	= secs:1, millisecs:500, microsecs:100	# (optional)

     

       
349
       
349
       
-
       
clock_precision_digits  = 0	# number of digits after dot. (optional)

     

       
350
       
350
       
-
       
ordering		= yes	# Is ordering defined for timestamps?

     

       
351
       
351
       
-
       
				# (optional, default: no)

     

       
352
       
352
       
-
       
tsa_name		= yes	# Must the TSA name be included in the reply?

     

       
353
       
353
       
-
       
				# (optional, default: no)

     

       
354
       
354
       
-
       
ess_cert_id_chain	= no	# Must the ESS cert id chain be included?

     

       
355
       
355
       
-
       
				# (optional, default: no)