mirror of https://github.com/dexidp/dex.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
26 lines
741 B
26 lines
741 B
#!/bin/bash |
|
|
|
mkdir -p ssl |
|
|
|
cat << EOF > ssl/req.cnf |
|
[req] |
|
req_extensions = v3_req |
|
distinguished_name = req_distinguished_name |
|
|
|
[req_distinguished_name] |
|
|
|
[ v3_req ] |
|
basicConstraints = CA:FALSE |
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment |
|
subjectAltName = @alt_names |
|
|
|
[alt_names] |
|
DNS.1 = dex.example.com |
|
EOF |
|
|
|
openssl genrsa -out ssl/ca-key.pem 2048 |
|
openssl req -x509 -new -nodes -key ssl/ca-key.pem -days 10 -out ssl/ca.pem -subj "/CN=kube-ca" |
|
|
|
openssl genrsa -out ssl/key.pem 2048 |
|
openssl req -new -key ssl/key.pem -out ssl/csr.pem -subj "/CN=kube-ca" -config ssl/req.cnf |
|
openssl x509 -req -in ssl/csr.pem -CA ssl/ca.pem -CAkey ssl/ca-key.pem -CAcreateserial -out ssl/cert.pem -days 10 -extensions v3_req -extfile ssl/req.cnf
|
|
|