TLS Einfacher per Skript
Version vom 29. Juni 2021, 16:03 Uhr von Thomas.will (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „<pre> #!/bin/bash COMMONNAME=$1 openssl genrsa -out $COMMONNAME.key 4096 openssl req -new -key $COMMONNAME.key -out $COMMONNAME.csr cat<<HERE > /tmp/ext.cnf […“)
#!/bin/bash
COMMONNAME=$1
openssl genrsa -out $COMMONNAME.key 4096
openssl req -new -key $COMMONNAME.key -out $COMMONNAME.csr
cat<<HERE > /tmp/ext.cnf
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = $COMMONNAME
HERE
openssl x509 -req -days 730 -in $COMMONNAME.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out $COMMONNAME.crt -extensions v3_req -extfile /tmp/ext.cnf
openssl x509 -noout -text -in ${COMMONNAME}.crt