mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 20:47:01 +01:00
53 lines
1.6 KiB
Bash
53 lines
1.6 KiB
Bash
|
#!/bin/sh
|
||
|
|
|
||
|
|
cat > ./altnames.cnf << DEVEOF
|
||
|
|
[req]
|
||
|
|
req_extensions = v3_req
|
||
|
|
nsComment = "Certificate"
|
||
|
|
distinguished_name = req_distinguished_name
|
||
|
|
|
||
|
|
[ req_distinguished_name ]
|
||
|
|
|
||
|
|
countryName = Country Name (2 letter code)
|
||
|
|
countryName_default = AU
|
||
|
|
countryName_min = 2
|
||
|
|
countryName_max = 2
|
||
|
|
|
||
|
|
stateOrProvinceName = State or Province Name (full name)
|
||
|
|
stateOrProvinceName_default = Queensland
|
||
|
|
|
||
|
|
localityName = Locality Name (eg, city)
|
||
|
|
localityName_default = Brisbane
|
||
|
|
|
||
|
|
0.organizationName = Organization Name (eg, company)
|
||
|
|
0.organizationName_default = INSECURE EXAMPLE
|
||
|
|
|
||
|
|
organizationalUnitName = Organizational Unit Name (eg, section)
|
||
|
|
organizationalUnitName_default = KaniDM
|
||
|
|
|
||
|
|
commonName = Common Name (eg, your name or your server\'s hostname)
|
||
|
|
commonName_max = 64
|
||
|
|
commonName_default = localhost
|
||
|
|
|
||
|
|
[ v3_req ]
|
||
|
|
|
||
|
|
# Extensions to add to a certificate request
|
||
|
|
|
||
|
|
basicConstraints = CA:FALSE
|
||
|
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||
|
|
subjectAltName = @alt_names
|
||
|
|
|
||
|
|
[alt_names]
|
||
|
|
DNS.1 = 127.0.0.1
|
||
|
|
|
||
|
|
DEVEOF
|
||
|
|
|
||
|
|
# Make the ca
|
||
|
|
openssl req -x509 -new -newkey rsa:2048 -keyout cakey.pem -out ca.pem -days 31 -subj "/C=AU/ST=Queensland/L=Brisbane/O=INSECURE/CN=insecure.ca.localhost" -nodes
|
||
|
|
openssl genrsa -out key.pem 2048
|
||
|
|
openssl req -key key.pem -out cert.csr -days 31 -config altnames.cnf -new
|
||
|
|
openssl x509 -req -days 31 -in cert.csr -CA ca.pem -CAkey cakey.pem -CAcreateserial -out cert.pem
|
||
|
|
|
||
|
|
echo use ca.pem, cert.pem, and key.pem
|
||
|
|
|