Ahmed Magdy a-magdy

Openssl commands:

openssl genrsa -out self-ssl.key
openssl req -new -key self-ssl.key -out self-ssl.csr -config csr.conf
openssl x509 -req -days 365 -in self-ssl.csr -signkey self-ssl.key -out self-ssl.crt -extensions req_ext -extfile csr.conf

Sign from Root CA: openssl x509 -req -days 365 -extensions req_ext -extfile csr.conf -CA RootCA.crt -CAkey RootCA.key -in self-ssl.csr -out self-ssl.crt

Shell scripting with Markdown documents

alias ~~~=":<<'~~~sh'";:<<'~~~sh'

	---
	apiVersion: v1
	kind: ConfigMap
	metadata: {name: content}
	data:
	index.html: '<html><body><h1>Hello world</h1></body></html>'
	---
	apiVersion: apps/v1beta2
	kind: Deployment
	metadata: {name: lb}

	#!/bin/sh
	# Decode a JWT from stdin and verify it's signature with the JWT issuer public key
	# Only RS256 keys are supported for signature check
	#
	# Put OAuth server public key in PEM format to /var/cache/oauth/$JWT_KID.key.pub.pem
	# You must create the folder first
	# $ sudo mkdir -p /var/cache/oauth/
	# To converted key from JWK to PEM use https://8gwifi.org/jwkconvertfunctions.jsp or https://keytool.online/
	# NOTE: For Google you can get the keys in PEM format via https://www.googleapis.com/oauth2/v1/certs
	# Decode the keys with decodeURIComponent()