Forked from yuezhu/gist:47b15b4b8e944221861ccf7d7f5868f5
Created
August 2, 2023 10:28
-
-
Save adubovikov/6ba825e57fb1ff86c368bd307517f4f8 to your computer and use it in GitHub Desktop.
Generate self-signed certificate for HAProxy
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Generate a unique private key (KEY) | |
sudo openssl genrsa -out mydomain.key 2048 | |
# Generating a Certificate Signing Request (CSR) | |
sudo openssl req -new -key mydomain.key -out mydomain.csr | |
# Creating a Self-Signed Certificate (CRT) | |
openssl x509 -req -days 365 -in mydomain.csr -signkey mydomain.key -out mydomain.crt | |
# Append KEY and CRT to mydomain.pem | |
sudo bash -c 'cat mydomain.key mydomain.crt >> /etc/ssl/private/mydomain.pem' | |
# Specify PEM in haproxy config | |
sudo vim /etc/haproxy/haproxy.cfg | |
listen haproxy | |
bind 0.0.0.0:443 ssl crt /etc/ssl/private/mydomain.pem |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment