diff --git a/test-keys/Makefile b/test-keys/Makefile new file mode 100644 index 00000000000..dc3d79f0457 --- /dev/null +++ b/test-keys/Makefile @@ -0,0 +1,17 @@ +all: root client server + +root: + openssl genrsa -out root.key 1024 + openssl req -x509 -new -key root.key -days 1000 -out root.crt -subj /C=US/ST=CA/O=ghostunnel/OU=root + +server: + openssl genrsa -out server.key 1024 + openssl req -new -key server.key -out server.csr -subj /C=US/ST=CA/O=ghostunnel/OU=server + openssl x509 -req -in server.csr -CA root.crt -CAkey root.key -CAcreateserial -out server.crt -days 1000 -extfile openssl.ext + openssl pkcs12 -export -out server.p12 -in server.crt -inkey server.key -password pass: + +client: + openssl genrsa -out client.key 1024 + openssl req -new -key client.key -out client.csr -subj /C=US/ST=CA/O=ghostunnel/OU=client + openssl x509 -req -in client.csr -CA root.crt -CAkey root.key -CAcreateserial -out client.crt -days 1000 -extfile openssl.ext + openssl pkcs12 -export -out client.p12 -in client.crt -inkey client.key -password pass: diff --git a/test-keys/README.md b/test-keys/README.md index 2514b9eb2c2..3363a4a562f 100644 --- a/test-keys/README.md +++ b/test-keys/README.md @@ -1,31 +1,6 @@ -Generate test keys -================== +Test keys +========= The certificates and keys contained in this directory have been generated for test/development purposes only. Do not use these files in production -deployments! See below for instructions on how these keys were generated. - -You must first generate a root certificate: - - openssl genrsa -out root.key 1024 - openssl req -x509 -new -key root.key -days 5 -out root.crt -subj /C=US/ST=CA/O=ghostunnel/OU=root - -Configure OpenSSL to set extensions and subject alt names: - - cat >openssl.ext <