mirror of
https://github.com/brunoos/luasec.git
synced 2024-09-07 05:14:43 +02:00
- Use 2048 bit keys (required for modern OpenSSL) - Use SHA256 instead of SHA1 (required for modern OpenSSL) - Add a SubjectAltName to be able to trigger certain edge-cases - Add all.sh to conveniently re-generate certificates
8 lines
313 B
Bash
Executable File
8 lines
313 B
Bash
Executable File
#!/bin/sh
|
|
|
|
openssl req -newkey rsa:2048 -sha256 -keyout rootAkey.pem -out rootAreq.pem -nodes -config ./rootA.cnf -days 365 -batch
|
|
|
|
openssl x509 -req -in rootAreq.pem -sha256 -extfile ./rootA.cnf -extensions v3_ca -signkey rootAkey.pem -out rootA.pem -days 365
|
|
|
|
openssl x509 -subject -issuer -noout -in rootA.pem
|