Alexander revised this gist . Go to revision
3 files changed, 25 insertions
genkey(file created)
@@ -0,0 +1,3 @@ | |||
1 | + | openssl genrsa -out relay.key 2048 | |
2 | + | openssl req -new -key relay.key -out relay.csr | |
3 | + | openssl x509 -req -in relay.csr -signkey relay.key -out relay.crt -days 3650 -sha256 -extfile v3.ext |
san.cnf(file created)
@@ -0,0 +1,16 @@ | |||
1 | + | [ req ] | |
2 | + | default_bits = 2048 | |
3 | + | distinguished_name = req_distinguished_name | |
4 | + | req_extensions = req_ext | |
5 | + | prompt = no | |
6 | + | [ req_distinguished_name ] | |
7 | + | countryName = de | |
8 | + | stateOrProvinceName = hessen | |
9 | + | localityName = frankfurt | |
10 | + | organizationName = none | |
11 | + | commonName = cosmic.voyage | |
12 | + | [ req_ext ] | |
13 | + | subjectAltName = @alt_names | |
14 | + | [alt_names] | |
15 | + | DNS.1 = cosmic.voyage | |
16 | + | DNS.2 = cosmic.voyage1 |
v3.ext(file created)
@@ -0,0 +1,6 @@ | |||
1 | + | subjectKeyIdentifier = hash | |
2 | + | authorityKeyIdentifier = keyid:always,issuer:always | |
3 | + | basicConstraints = CA:TRUE | |
4 | + | keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign | |
5 | + | subjectAltName = DNS:cosmic.voyage | |
6 | + | issuerAltName = issuer:copy |