Created
September 16, 2015 12:10
-
-
Save nlamirault/181c7ca710c054d4f2f7 to your computer and use it in GitHub Desktop.
openssl certificates K8s
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Master IP | |
IP=$1 | |
# Output directory | |
DIR=$2 | |
echo "--> Generate CA.key" | |
openssl genrsa -out ${DIR}/ca.key 2048 | |
echo "--> Generate CA crt" | |
openssl req -x509 -new -nodes -key ${DIR}/ca.key -subj "/CN=${IP}" -days 10000 -out ${DIR}/ca.crt | |
echo "--> Generate a server key" | |
openssl genrsa -out ${DIR}/server.key 2048 | |
echo "--> Generate a server.csr" | |
openssl req -new -key ${DIR}/server.key -subj "/CN=${IP}" -out ${DIR}/server.csr | |
echo "--> Generate a server crt" | |
openssl x509 -req -in ${DIR}/server.csr -CA ${DIR}/ca.crt -CAkey ${DIR}/ca.key -CAcreateserial -out ${DIR}/server.crt -days 10000 | |
echo "--> View certificate" | |
openssl x509 -noout -text -in ${DIR}/server.crt |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment