Skip to content

Instantly share code, notes, and snippets.

@nlamirault
Created September 16, 2015 12:10
Show Gist options
  • Save nlamirault/181c7ca710c054d4f2f7 to your computer and use it in GitHub Desktop.
Save nlamirault/181c7ca710c054d4f2f7 to your computer and use it in GitHub Desktop.
openssl certificates K8s
# Master IP
IP=$1
# Output directory
DIR=$2
echo "--> Generate CA.key"
openssl genrsa -out ${DIR}/ca.key 2048
echo "--> Generate CA crt"
openssl req -x509 -new -nodes -key ${DIR}/ca.key -subj "/CN=${IP}" -days 10000 -out ${DIR}/ca.crt
echo "--> Generate a server key"
openssl genrsa -out ${DIR}/server.key 2048
echo "--> Generate a server.csr"
openssl req -new -key ${DIR}/server.key -subj "/CN=${IP}" -out ${DIR}/server.csr
echo "--> Generate a server crt"
openssl x509 -req -in ${DIR}/server.csr -CA ${DIR}/ca.crt -CAkey ${DIR}/ca.key -CAcreateserial -out ${DIR}/server.crt -days 10000
echo "--> View certificate"
openssl x509 -noout -text -in ${DIR}/server.crt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment