summaryrefslogtreecommitdiff
path: root/example/create_key.sh
blob: 99ee07c88c9955d46775e75f83b7b3324db36da3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
#!/bin/bash

cat <<EOF

Generating a new test key and certificate.  To change the defaults offered
by openssl, edit your openssl.cnf, such as /etc/ssl/openssl.cnf

EOF

openssl genrsa -out server.key 4096
chmod 600 server.key
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

cat <<EOH

Now to enable these new keys, do:

  cp server.key idp2/pki/mykey.pem
  cp server.crt idp2/pki/mycert.pem

  cp server.key sp-wsgi/pki/mykey.pem
  cp server.crt sp-wsgi/pki/mycert.pem

EOH