forked from TrueCloudLab/frostfs-dev-env
[#1] Update cert generation scripts
Signed-off-by: Alex Vanin <a.vanin@yadro.com>
This commit is contained in:
parent
80dc0faae9
commit
6b0ce07808
2 changed files with 2 additions and 2 deletions
|
@ -16,7 +16,7 @@ CLI_KEY=$WORKDIR/client-key.pem
|
||||||
CLI_REQ=$WORKDIR/client-req.csr
|
CLI_REQ=$WORKDIR/client-req.csr
|
||||||
CLI_CRT=$WORKDIR/client-cert.pem
|
CLI_CRT=$WORKDIR/client-cert.pem
|
||||||
|
|
||||||
SUBJ="/O=NSPCC"
|
SUBJ="/O=TrueCloudLab"
|
||||||
|
|
||||||
if [[ ! -f $CA_KEY || ! -f $CA_CRT ]]; then
|
if [[ ! -f $CA_KEY || ! -f $CA_CRT ]]; then
|
||||||
openssl req -newkey rsa:4096 -x509 -days 365 -nodes -keyout $CA_KEY -out $CA_CRT -subj $SUBJ 2>&1 ||
|
openssl req -newkey rsa:4096 -x509 -days 365 -nodes -keyout $CA_KEY -out $CA_CRT -subj $SUBJ 2>&1 ||
|
||||||
|
|
|
@ -19,7 +19,7 @@ if [[ ! -f ${CERT} ]]; then
|
||||||
) > ${SSL_CONFIG}
|
) > ${SSL_CONFIG}
|
||||||
|
|
||||||
openssl req -new -newkey rsa:4096 -x509 -sha256 -days 365 -nodes \
|
openssl req -new -newkey rsa:4096 -x509 -sha256 -days 365 -nodes \
|
||||||
-subj "/C=RU/ST=SPB/L=St.Petersburg/O=NSPCC/OU=NSPCC/CN=s04.${LOCAL_DOMAIN}" \
|
-subj "/C=RU/ST=SPB/L=St.Petersburg/O=TrueCloudLab/OU=TrueCloudLab/CN=s04.${LOCAL_DOMAIN}" \
|
||||||
-keyout "${KEY}" -out "${CERT}" -extensions san -config "${SSL_CONFIG}" &> /dev/null || {
|
-keyout "${KEY}" -out "${CERT}" -extensions san -config "${SSL_CONFIG}" &> /dev/null || {
|
||||||
die "Failed to generate SSL certificate for s04"
|
die "Failed to generate SSL certificate for s04"
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue