Mercurial > repos > other > usr-local-bin

diff make-certificate @ 18:b8c7a89c4ebd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Include Subject Alt Name in certs and use CA function
author IBBoard <dev@ibboard.co.uk>
date Mon, 01 Oct 2018 20:48:28 +0100
parents 14c88dd76d53
children 86ca8ee7b597
line wrap: on
line diff
--- a/make-certificate	Mon Mar 19 19:34:56 2018 +0000
+++ b/make-certificate	Mon Oct 01 20:48:28 2018 +0100
@@ -14,6 +14,8 @@
 
 pushd ~/Websites/certs/
 
-openssl req -nodes -new -keyout $1.key -out $1.csr -subj "/C=GB/ST=Worcestershire/O=$1/CN=$1"
-openssl x509 -req -days 365 -in $1.csr -CA ~/.ssh/CA/ca.crt -CAkey ~/.ssh/CA/ca.key -CAserial ~/.ssh/CA/ca.srl -out $1.crt
+openssl req -nodes -sha256 -new -keyout $1.key -out $1.csr -subj "/C=GB/ST=Worcestershire/O=$1/CN=$1" \
+	-config <(cat ~/.ssh/CA/openssl.cnf <(echo "DNS.1=$1"))
+openssl ca -in $1.csr -out $1.crt -cert ~/.ssh/CA/ca.crt -keyfile ~/.ssh/CA/ca.key -days 365 \
+	-config <(cat ~/.ssh/CA/openssl.cnf <(echo "DNS.1=$1")) -batch
 popd