luasec/samples/certs/clientA.sh

#!/usr/bin/env sh

openssl req -newkey rsa:2048 -sha256 -keyout clientAkey.pem -out clientAreq.pem \
  -nodes -config ./clientA.cnf -days 365 -batch

openssl x509 -req -in clientAreq.pem -sha256 -extfile ./clientA.cnf \
  -extensions usr_cert -CA rootA.pem -CAkey rootAkey.pem -CAcreateserial \
  -out clientAcert.pem -days 365

cat clientAcert.pem rootA.pem > clientA.pem

openssl x509 -subject -issuer -noout -in clientA.pem
Use a more generic form 2019-10-19 15:22:21 +02:00			`#!/usr/bin/env sh`
LuaSec 0.2 2012-09-02 16:15:49 +02:00
Modernize certificate generation - Use 2048 bit keys (required for modern OpenSSL) - Use SHA256 instead of SHA1 (required for modern OpenSSL) - Add a SubjectAltName to be able to trigger certain edge-cases - Add all.sh to conveniently re-generate certificates 2018-11-19 15:56:42 +01:00			`openssl req -newkey rsa:2048 -sha256 -keyout clientAkey.pem -out clientAreq.pem \`
LuaSec 0.2 2012-09-02 16:15:49 +02:00			`-nodes -config ./clientA.cnf -days 365 -batch`

Modernize certificate generation - Use 2048 bit keys (required for modern OpenSSL) - Use SHA256 instead of SHA1 (required for modern OpenSSL) - Add a SubjectAltName to be able to trigger certain edge-cases - Add all.sh to conveniently re-generate certificates 2018-11-19 15:56:42 +01:00			`openssl x509 -req -in clientAreq.pem -sha256 -extfile ./clientA.cnf \`
LuaSec 0.2 2012-09-02 16:15:49 +02:00			`-extensions usr_cert -CA rootA.pem -CAkey rootAkey.pem -CAcreateserial \`
			`-out clientAcert.pem -days 365`

			`cat clientAcert.pem rootA.pem > clientA.pem`

			`openssl x509 -subject -issuer -noout -in clientA.pem`