@@ -11,7 +11,7 @@ if [[ "$#" -eq 0 ]]; then
11
11
12
12
You can also create certificates for wildcard domains:
13
13
$( basename $0 ) '*.my-domain.tdl'
14
-
14
+
15
15
EOF
16
16
exit 0
17
17
else
24
24
# Create a nginx container (which conveniently provides the `openssl` command)
25
25
# ##############################################################################
26
26
27
- CONTAINER=$( docker run -d -v $DIR :/work -w /work -e SAN=" $ALTERNATE_DOMAINS " nginx:1.11.8 )
28
- # Configure openssl
27
+ CONTAINER=$( docker run -d -v $DIR :/work -w /work -e SAN=" $ALTERNATE_DOMAINS " nginx:1.11.13 )
28
+ # Configure openssl
29
29
docker exec $CONTAINER bash -c '
30
30
mkdir -p /ca/{certs,crl,private,newcerts} 2>/dev/null
31
31
echo 1000 > /ca/serial
@@ -117,7 +117,7 @@ function openssl {
117
117
}
118
118
119
119
function exitfail {
120
- echo
120
+ echo
121
121
echo ERROR: " $@ "
122
122
docker rm -f $CONTAINER
123
123
exit 1
@@ -129,15 +129,15 @@ function exitfail {
129
129
# ##############################################################################
130
130
131
131
if ! [[ -f " $DIR /ca-root.key" ]]; then
132
- echo
132
+ echo
133
133
echo " > Create a Certificate Authority root key: $DIR /ca-root.key"
134
134
openssl genrsa -out ca-root.key 2048
135
135
[[ $? -eq 0 ]] || exitfail failed to generate CA root key
136
136
fi
137
137
138
- # Create a CA root certificate
138
+ # Create a CA root certificate
139
139
if ! [[ -f " $DIR /ca-root.crt" ]]; then
140
- echo
140
+ echo
141
141
echo " > Create a CA root certificate: $DIR /ca-root.crt"
142
142
openssl req -config /ca/openssl.cnf \
143
143
-key ca-root.key \
154
154
# create server key and certificate signed by the certificate authority
155
155
# ##############################################################################
156
156
157
- echo
157
+ echo
158
158
echo " > Create a host key: $DIR /$DOMAIN .key"
159
159
openssl genrsa -out " $DOMAIN .key" 2048
160
160
161
- echo
161
+ echo
162
162
echo " > Create a host certificate signing request"
163
163
164
164
SAN=" $ALTERNATE_DOMAINS " openssl req -config /ca/openssl.cnf \
165
165
-key " $DOMAIN .key" \
166
- -new -out " /ca/$DOMAIN .csr" -days 1000 -extensions san_env -subj " /CN=$DOMAIN "
166
+ -new -out " /ca/$DOMAIN .csr" -days 1000 -extensions san_env -subj " /CN=$DOMAIN "
167
167
[[ $? -eq 0 ]] || exitfail failed to generate server certificate signing request
168
168
169
- echo
169
+ echo
170
170
echo " > Create server certificate: $DIR /$DOMAIN .crt"
171
171
SAN=" $ALTERNATE_DOMAINS " openssl ca -config /ca/openssl.cnf -batch \
172
172
-extensions server_cert \
173
173
-extensions san_env \
174
174
-in " /ca/$DOMAIN .csr" \
175
- -out " $DOMAIN .crt"
175
+ -out " $DOMAIN .crt"
176
176
[[ $? -eq 0 ]] || exitfail failed to generate server certificate
177
177
178
178
179
179
# Verify host certificate
180
- # openssl x509 -noout -text -in "$DOMAIN.crt"
180
+ # openssl x509 -noout -text -in "$DOMAIN.crt"
181
181
182
182
183
183
docker rm -f $CONTAINER > /dev/null
0 commit comments