mirror of https://github.com/dexidp/dex.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
45 lines
939 B
45 lines
939 B
3 years ago
|
# Regenerate testdata
|
||
|
|
|
||
|
|
### server.csr.cnf
|
||
|
|
|
||
|
|
```
|
||
|
|
[req]
|
||
|
|
default_bits = 2048
|
||
|
|
prompt = no
|
||
|
|
default_md = sha256
|
||
|
|
distinguished_name = dn
|
||
|
|
|
||
|
|
[dn]
|
||
|
|
C=US
|
||
|
|
ST=RandomState
|
||
|
|
L=RandomCity
|
||
|
|
O=RandomOrganization
|
||
|
|
OU=RandomOrganizationUnit
|
||
|
|
emailAddress=hello@example.com
|
||
|
|
CN = localhost
|
||
|
|
```
|
||
|
|
|
||
|
|
and
|
||
|
|
|
||
|
|
### v3.ext
|
||
|
|
```
|
||
|
|
authorityKeyIdentifier=keyid,issuer
|
||
|
|
basicConstraints=CA:FALSE
|
||
|
|
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
|
||
|
|
subjectAltName = @alt_names
|
||
|
|
|
||
|
|
[alt_names]
|
||
|
|
DNS.1 = localhost
|
||
|
|
IP.1 = 127.0.0.1
|
||
|
|
```
|
||
|
|
|
||
|
|
### Then enter the following commands:
|
||
|
|
|
||
|
|
`openssl genrsa -out rootCA.key 2048`
|
||
|
|
|
||
|
|
`openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 3650 -out rootCA.pem -config server.csr.cnf`
|
||
|
|
|
||
|
|
`openssl req -new -sha256 -nodes -out server.csr -newkey rsa:2048 -keyout server.key -config server.csr.cnf`
|
||
|
|
|
||
|
|
`openssl x509 -req -in server.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out server.crt -days 3650 -sha256 -extfile v3.ext`
|