mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-02 03:46:29 +02:00
9af2226b5b
Since go1.15, X.509 CommonName is deprecated, switch to a SANs certificate for test redis TLS. While at it, add instruction to genearte cert and build test image. See: https://golang.org/doc/go1.15#commonname
27 lines
656 B
Bash
Executable file
27 lines
656 B
Bash
Executable file
#!/bin/bash
|
|
|
|
#!/bin/bash
|
|
mkdir -p tls
|
|
openssl genrsa -out tls/ca.key 4096
|
|
openssl req \
|
|
-x509 -new -nodes -sha256 \
|
|
-key tls/ca.key \
|
|
-days 3650 \
|
|
-subj '/O=Redis Test/CN=Pomerium CA' \
|
|
-out tls/ca.crt
|
|
openssl genrsa -out tls/redis.key 2048
|
|
openssl req \
|
|
-new -sha256 \
|
|
-key tls/redis.key \
|
|
-subj '/O=Redis Test/CN=Server' | \
|
|
openssl x509 \
|
|
-req -sha256 \
|
|
-CA tls/ca.crt \
|
|
-CAkey tls/ca.key \
|
|
-CAserial tls/ca.txt \
|
|
-CAcreateserial \
|
|
-days 3650 \
|
|
-out tls/redis.crt \
|
|
-extensions san \
|
|
-extfile tls/req.conf
|
|
openssl dhparam -out tls/redis.dh 2048
|