mirror of
https://github.com/clearlinux/docker.git
synced 2026-10-03 23:38:24 +00:00
Add a containerised test for the https cert doc
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@docker.com> (github: SvenDowideit)
This commit is contained in:
committed by
Sven Dowideit
parent
f65b781d21
commit
cf27b310c4
Executable
+23
@@ -0,0 +1,23 @@
|
||||
#!/bin/bash
|
||||
|
||||
openssl genrsa -aes256 -out ca-key.pem 2048
|
||||
|
||||
echo "enter your Docker daemon's hostname as the 'Common Name'= ($HOST)"
|
||||
|
||||
#TODO add this as an ENV to docker run?
|
||||
openssl req -new -x509 -days 365 -key ca-key.pem -sha256 -out ca.pem
|
||||
|
||||
|
||||
# server cert
|
||||
openssl genrsa -out server-key.pem 2048
|
||||
openssl req -subj "/CN=$HOST" -new -key server-key.pem -out server.csr
|
||||
openssl x509 -req -days 365 -in server.csr -CA ca.pem -CAkey ca-key.pem \
|
||||
-CAcreateserial -out server-cert.pem
|
||||
|
||||
#client cert
|
||||
openssl genrsa -out key.pem 2048
|
||||
openssl req -subj '/CN=client' -new -key key.pem -out client.csr
|
||||
|
||||
echo extendedKeyUsage = clientAuth > extfile.cnf
|
||||
openssl x509 -req -days 365 -in client.csr -CA ca.pem -CAkey ca-key.pem \
|
||||
-CAcreateserial -out cert.pem -extfile extfile.cnf
|
||||
Reference in New Issue
Block a user