mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-06 13:56:04 +02:00
683c591f14
* pkg/storage/redis: use SANs cert Since go1.15, X.509 CommonName is deprecated, switch to a SANs certificate for test redis TLS. While at it, add instruction to genearte cert and build test image. See: https://golang.org/doc/go1.15#commonname * config: do not test for exact route id Different go version can genearte different route id, due to the fact that we are relying on xxhash. * internal/controlplane: mocking policy name in test We don't have to test for exact policy name, as it does not make sense and force us to change test every new go release. Co-authored-by: Cuong Manh Le <cuong.manhle.vn@gmail.com>
27 lines
656 B
Bash
Executable file
27 lines
656 B
Bash
Executable file
#!/bin/bash
|
|
|
|
#!/bin/bash
|
|
mkdir -p tls
|
|
openssl genrsa -out tls/ca.key 4096
|
|
openssl req \
|
|
-x509 -new -nodes -sha256 \
|
|
-key tls/ca.key \
|
|
-days 3650 \
|
|
-subj '/O=Redis Test/CN=Pomerium CA' \
|
|
-out tls/ca.crt
|
|
openssl genrsa -out tls/redis.key 2048
|
|
openssl req \
|
|
-new -sha256 \
|
|
-key tls/redis.key \
|
|
-subj '/O=Redis Test/CN=Server' | \
|
|
openssl x509 \
|
|
-req -sha256 \
|
|
-CA tls/ca.crt \
|
|
-CAkey tls/ca.key \
|
|
-CAserial tls/ca.txt \
|
|
-CAcreateserial \
|
|
-days 3650 \
|
|
-out tls/redis.crt \
|
|
-extensions san \
|
|
-extfile tls/req.conf
|
|
openssl dhparam -out tls/redis.dh 2048
|