summaryrefslogtreecommitdiff
path: root/example/create_key.sh
blob: 4929a4662bb043fcb671e120ceca498b9e7b64f8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
#!/bin/bash

cat <<EOF

Generating a new test key and certificate.  To change the defaults offered
by openssl, edit your openssl.cnf, such as /etc/ssl/openssl.cnf

EOF

openssl genrsa -out server.key 1024
chmod 600 server.key
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

cat <<EOH

Now to enable these new keys, do:

  cp server.key idp2/pki/mykey.pem
  cp server.crt idp2/pki/mycert.pem

  cp server.key sp-wsgi/pki/mykey.pem
  cp server.crt sp-wsgi/pki/mycert.pem

EOH