mirror of
https://github.com/status-im/consul.git
synced 2025-01-09 13:26:07 +00:00
5fb9df1640
* Adding explicit MPL license for sub-package This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Adding explicit MPL license for sub-package This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Updating the license from MPL to Business Source License Going forward, this project will be licensed under the Business Source License v1.1. Please see our blog post for more details at <Blog URL>, FAQ at www.hashicorp.com/licensing-faq, and details of the license at www.hashicorp.com/bsl. * add missing license headers * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 * Update copyright file headers to BUSL-1.1 --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
49 lines
1.3 KiB
Bash
Executable File
49 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
|
|
set -eEuo pipefail
|
|
unset CDPATH
|
|
|
|
# force the script to first switch to the directory containing the script before
|
|
# messing with the filesystem
|
|
cd "$(dirname "$0")"
|
|
rm -rf *.crt *.key
|
|
|
|
openssl genrsa -out ca-root.key 4096
|
|
openssl req -x509 -new -nodes -key ca-root.key -out ca-root.crt \
|
|
-subj "/C=US/ST=CA/O=/CN=SDS Test CA Cert" \
|
|
-sha256 -days 3650
|
|
|
|
function gen_cert {
|
|
local FILE_NAME=$1
|
|
local DNS_NAME=$2
|
|
|
|
openssl genrsa -out "$FILE_NAME.key" 2048
|
|
openssl req -new -key "$FILE_NAME.key" -out "$FILE_NAME.csr" \
|
|
-reqexts SAN \
|
|
-config <(cat /etc/ssl/openssl.cnf \
|
|
<(printf "\n[SAN]\nsubjectAltName=DNS:$DNS_NAME")) \
|
|
-subj "/C=US/ST=CA/O=/CN=$DNS_NAME"
|
|
|
|
openssl x509 -req -in "$FILE_NAME.csr" \
|
|
-CA ca-root.crt -CAkey ca-root.key -CAcreateserial \
|
|
-out "$FILE_NAME.crt" -days 3650 -sha256 \
|
|
-extfile <(printf "subjectAltName=DNS:$DNS_NAME")
|
|
|
|
rm "$FILE_NAME.csr"
|
|
}
|
|
|
|
DOMAINS="www.example.com foo.example.com *.ingress.consul"
|
|
|
|
for domain in $DOMAINS
|
|
do
|
|
# * in file names is interpreted as a global and all sorts of things go
|
|
# strange!
|
|
FILE_NAME="$domain"
|
|
if [ ${domain:0:2} == "*." ]; then
|
|
FILE_NAME="wildcard.${domain:2}"
|
|
fi
|
|
gen_cert $FILE_NAME $domain
|
|
done |