51 lines
1.7 KiB
Bash
51 lines
1.7 KiB
Bash
|
#
|
||
|
|
# Copyright © 2021,2022 IsardVDI S.L.
|
||
|
|
#
|
||
|
|
# This file is part of DD
|
||
|
|
#
|
||
|
|
# DD is free software: you can redistribute it and/or modify
|
||
|
|
# it under the terms of the GNU Affero General Public License as published by
|
||
|
|
# the Free Software Foundation, either version 3 of the License, or (at your
|
||
|
|
# option) any later version.
|
||
|
|
#
|
||
|
|
# DD is distributed in the hope that it will be useful, but WITHOUT ANY
|
||
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
||
|
|
# FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
||
|
|
# details.
|
||
|
|
#
|
||
|
|
# You should have received a copy of the GNU Affero General Public License
|
||
|
|
# along with DD. If not, see <https://www.gnu.org/licenses/>.
|
||
|
|
#
|
||
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||
|
|
cd /certs
|
||
|
|
|
||
|
|
# Self signed cert generic data
|
||
|
|
C=CA
|
||
|
|
L=Barcelona
|
||
|
|
O=localdomain
|
||
|
|
CN_CA=$O
|
||
|
|
CN_HOST=*.$O
|
||
|
|
OU=$O
|
||
|
|
|
||
|
|
echo '#### Creating 2048-bit RSA key:'
|
||
|
|
openssl genrsa -out ca-key.pem 2048
|
||
|
|
|
||
|
|
echo '#### Using the key to create a self-signed certificate to your CA:'
|
||
|
|
openssl req -new -x509 -days 9999 -key ca-key.pem -out ca-cert.pem -sha256 \
|
||
|
|
-subj "/C=$C/L=$L/O=$O/CN=$CN_CA"
|
||
|
|
|
||
|
|
echo '#### Creating server certificate:'
|
||
|
|
openssl genrsa -out server-key.pem 2048
|
||
|
|
|
||
|
|
echo '#### Creating a certificate signing request for the server:'
|
||
|
|
openssl req -new -key server-key.pem -sha256 -out server-key.csr \
|
||
|
|
-subj "/CN=$CN_HOST"
|
||
|
|
|
||
|
|
echo '#### Creating server certificate:'
|
||
|
|
RND=$(( ( RANDOM % 1000 ) + 1 ))
|
||
|
|
openssl x509 -req -days 9999 -in server-key.csr -CA ca-cert.pem -CAkey ca-key.pem \
|
||
|
|
-set_serial $RND -sha256 -out server-cert.pem
|
||
|
|
|
||
|
|
echo '#### Concatenate certs for haprox'
|
||
|
|
cat server-cert.pem server-key.pem > chain.pem
|