generated from GamingChaos/docker-compose
29 lines
917 B
Bash
Executable File
29 lines
917 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
[ -d ssl ] || mkdir ssl
|
|
cd ssl
|
|
|
|
hostname=$(hostname)
|
|
lgtm_ssl=/home/vst/lgtm-stack/ssl
|
|
function request-certificate {
|
|
type=$1
|
|
scsr=$lgtm_ssl/$hostname.$type.csr
|
|
scrt=$lgtm_ssl/$hostname.$type.crt
|
|
|
|
openssl req -new -newkey rsa:2048 -nodes -keyout $type.key -out $type.csr -subj "/CN=$hostname.stuyckv.local"
|
|
scp $type.csr vst@shion.stuyckv.local:$scsr
|
|
|
|
ssh vst@shion.stuyckv.local openssl x509 -req -in $scsr -CA $lgtm_ssl/ca.crt -CAkey $lgtm_ssl/ca.key -CAcreateserial -out $scrt -days 365
|
|
scp vst@shion.stuyckv.local:$scrt $type.crt
|
|
rm $type.csr
|
|
}
|
|
|
|
request-certificate client
|
|
request-certificate server
|
|
# openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/CN=$(hostname).stuyckv.local"
|
|
# openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 365
|
|
|
|
cd ..
|
|
|
|
# sudo chown -R 10001:10001 ./ssl
|