Brandon Philips
9f14e75360
fix(fixtures/ca): generate with clientAuth and serverAuth
|
%!s(int64=12) %!d(string=hai) anos | |
|---|---|---|
| .. | ||
| broken | %!s(int64=12) %!d(string=hai) anos | |
| .gitattributes | %!s(int64=12) %!d(string=hai) anos | |
| README | %!s(int64=12) %!d(string=hai) anos | |
| ca.crt | %!s(int64=12) %!d(string=hai) anos | |
| ca.key | %!s(int64=12) %!d(string=hai) anos | |
| chain.pem | %!s(int64=12) %!d(string=hai) anos | |
| chain2.pem | %!s(int64=12) %!d(string=hai) anos | |
| openssl.cnf | %!s(int64=12) %!d(string=hai) anos | |
| server.crt | %!s(int64=12) %!d(string=hai) anos | |
| server.csr | %!s(int64=12) %!d(string=hai) anos | |
| server.key | %!s(int64=12) %!d(string=hai) anos | |
| server.key.insecure | %!s(int64=12) %!d(string=hai) anos | |
| server.pem | %!s(int64=12) %!d(string=hai) anos | |
| server.pub | %!s(int64=12) %!d(string=hai) anos | |
| server.pub.sig | %!s(int64=12) %!d(string=hai) anos | |
| server2.crt | %!s(int64=12) %!d(string=hai) anos | |
| server2.csr | %!s(int64=12) %!d(string=hai) anos | |
| server2.key | %!s(int64=12) %!d(string=hai) anos | |
| server2.key.insecure | %!s(int64=12) %!d(string=hai) anos | |
| server2.pub | %!s(int64=12) %!d(string=hai) anos | |
README
Testing x509 certs for luacrypto
# Make the CA cert
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt -extfile openssl.cnf -extensions v3_ca
# Make server cert and signing request
openssl genrsa -des3 -out server.key 4096
openssl req -new -key server.key -out server.csr -config openssl.cnf
# Sign the server csr and generate a crt
openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt -extfile openssl.cnf -extensions v3_req
# Output unencrypted server key
openssl rsa -in server.key -out server.key.insecure
# Output "raw" public key from server crt
openssl x509 -pubkey -noout -in server.crt > server.pub
# Make the CA cert
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt -extfile openssl.cnf -extensions v3_ca
# Make server cert and signing request
openssl genrsa -des3 -out server.key 4096
openssl req -new -key server.key -out server.csr -config openssl.cnf
# Sign the server csr and generate a crt
openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt -extfile openssl.cnf -extensions v3_req
# Output unencrypted server key
openssl rsa -in server.key -out server.key.insecure
# Output "raw" public key from server crt
openssl x509 -pubkey -noout -in server.crt > server.pub