4a68d29ce2
Co-authored-by: Gérald Croës <gerald@containo.us> |
||
---|---|---|
.. | ||
ca1.crt | ||
ca1.key | ||
ca1.srl | ||
ca1and2.crt | ||
ca2.crt | ||
ca2.key | ||
ca2.srl | ||
ca3.crt | ||
ca3.key | ||
ca3.srl | ||
client1.crt | ||
client1.csr | ||
client1.key | ||
client2.crt | ||
client2.csr | ||
client2.key | ||
client3.crt | ||
client3.csr | ||
client3.key | ||
https_1ca1config.toml | ||
https_2ca1config.toml | ||
https_2ca2config.toml | ||
README.md |
This is how the certs were created
openssl req -new -newkey rsa:2048 -x509 -days 3650 -extensions v3_ca -keyout ca1.pem -out ca1.crt
openssl req -new -newkey rsa:2048 -x509 -days 3650 -extensions v3_ca -keyout ca2.pem -out ca2.crt
openssl req -new -newkey rsa:2048 -x509 -days 3650 -extensions v3_ca -keyout ca3.pem -out ca3.crt
openssl rsa -in ca1.pem -out ca1.key
openssl rsa -in ca2.pem -out ca2.key
openssl rsa -in ca3.pem -out ca3.key
cat ca1.crt ca2.crt > ca1and2.crt
rm ca1.pem ca2.pem ca3.pem
openssl genrsa -out client1.key 2048
openssl genrsa -out client2.key 2048
openssl genrsa -out client3.key 2048
openssl req -key client1.key -new -out client1.csr
openssl req -key client2.key -new -out client2.csr
openssl req -key client3.key -new -out client3.csr
openssl x509 -req -days 3650 -in client1.csr -CA ca1.crt -CAkey ca1.key -CAcreateserial -out client1.crt
openssl x509 -req -days 3650 -in client2.csr -CA ca2.crt -CAkey ca2.key -CAcreateserial -out client2.crt
openssl x509 -req -days 3650 -in client3.csr -CA ca3.crt -CAkey ca3.key -CAcreateserial -out client3.crt