--- /dev/null
+#
+# common keychain stuff shared by makeLocalCert and ssldvt
+#
+set BUILD_DIR=$LOCAL_BUILD_DIR
+#
+# generally used by ssl server side
+set LOCAL_KC=localcert
+set LOCAL_KC_PWD=localcert
+set LOCAL_CERT=$BUILD_DIR/$LOCAL_KC.cer
+
+# ssl client side
+set CLIENT_KC=clientcert
+set CLIENT_KC_PWD=clientcert
+set CLIENT_CERT=$BUILD_DIR/$CLIENT_KC.cer
+
+# one for DSA as well
+set DSA_KC=dsacert
+set DSA_KC_PWD=dsacert
+set DSA_CERT=$BUILD_DIR/$DSA_KC.cer
+
+# import P12_PFX to P12_KC
+set P12_PFX=test1.p12
+set P12_KC=p12cert
+
+# passwords for P12_PFX, P12_KC
+set P12_PFX_PWD=password
+set P12_KC_PWD=p12cert
+# extract from P12_KC to this file base
+set P12_CERT_BASE=$BUILD_DIR/p12cert
+# and this one is the root
+set P12_ROOT_CERT=$BUILD_DIR/p12cert_1
+
+#
+# keychain directory, which varies depending on whether we are root.
+# Note since root behaves differently depending on whether we actually logged in
+# as root, or is running via e.g. cron, we force the issue of "where are root's
+# keychains kept" by specifying a full path for the keychain for root in any case.
+#
+set USERNAME=`whoami`
+if($USERNAME == root) then
+ set KC_DIR=$BUILD_DIR/Library/Keychains
+else
+ set KC_DIR=$HOME/Library/Keychains
+endif
+
+# full paths for when we refer to actual files
+set LOCAL_KC_PATH=$KC_DIR/$LOCAL_KC
+set CLIENT_KC_PATH=$KC_DIR/$CLIENT_KC
+set DSA_KC_PATH=$KC_DIR/$DSA_KC
+set P12_KC_PATH=$KC_DIR/$P12_KC
+
+# and re-set keychain names for root only
+if($USERNAME == root) then
+ mkdir -p $KC_DIR
+ set LOCAL_KC=$LOCAL_KC_PATH
+ set CLIENT_KC=$CLIENT_KC_PATH
+ set DSA_KC=$DSA_KC_PATH
+ set P12_KC=$P12_KC_PATH
+endif