CA: Prepare new certificate

The key is, obviously, not here.

cacerts/emergency-ca/01.pem

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

cacerts/emergency-ca/certindex

+V	171130083028Z		01	unknown	/CN=api.turris.cz/ST=Czech republic/C=CZ/emailAddress=security@turris.cz/O=CZ.NIC/OU=Turris

cacerts/emergency-ca/certindex.attr

+unique_subject = no

cacerts/emergency-ca/certserial

-01
+02

cacerts/emergency-ca/config

@@ -33,4 +33,4 @@ subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always
 keyUsage = digitalSignature,keyEncipherment
 extendedKeyUsage = serverAuth
-crlDistributionPoints = URI:https://api.turris.cz/crl
+crlDistributionPoints = URI:http://api.turris.cz/crl

cacerts/emergency-ca/crl.pem

+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

cacerts/emergency-ca/crlnumber

-01
+02

cacerts/emergency-ca/getcrl

 #!/bin/sh
 
 set -ex
-cd $(dirname "$0")
 openssl ca -config config -gencrl -keyfile ca.key -cert ca.crt -out crl.pem

cacerts/emergency-ca/new.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----