You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
42 lines
1.9 KiB
42 lines
1.9 KiB
#!/bin/bash |
|
#相关配置信息 |
|
HOST="139.9.72.189" |
|
PASSWORD="springcloudgateway" |
|
COUNTRY="CN" |
|
STATE="ChangSha" |
|
CITY="WangCheng" |
|
ORGANIZATION="dolphin" |
|
ORGANIZATIONAL_UNIT="dev" |
|
EMAIL="1827945911@qq.com" |
|
###开始生成文件### |
|
echo "开始生成文件" |
|
#切换到生产密钥的目录 |
|
mkdir -p /opt/docker/certs |
|
cd /opt/docker/certs |
|
#生成ca私钥(使用aes256加密) |
|
openssl genrsa -aes256 -passout pass:$PASSWORD -out ca-key.pem 4096 |
|
#生成ca证书，填写配置信息(签发了100年) |
|
openssl req -new -x509 -passin "pass:$PASSWORD" -days 36500 -key ca-key.pem -sha256 -out ca.pem -subj "/C=$COUNTRY/ST=$STATE/L=$CITY/O=$ORGANIZATION/OU=$ORGANIZATIONAL_UNIT/CN=$HOST/emailAddress=$EMAIL" |
|
#生成server证书私钥文件 |
|
openssl genrsa -out server-key.pem 4096 |
|
#生成server证书请求文件 |
|
openssl req -subj "/CN=$HOST" -sha256 -new -key server-key.pem -out server.csr |
|
#使用CA证书及CA密钥以及上面的server证书请求文件进行签发，生成server自签证书 |
|
sh -c 'echo "subjectAltName=DNS:'$HOST',IP:'$HOST'" > extfile.cnf' |
|
sh -c 'echo "extendedKeyUsage=serverAuth" >> extfile.cnf' |
|
openssl x509 -req -days 36500 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem -passin "pass:$PASSWORD" -CAcreateserial -out server-cert.pem -extfile extfile.cnf |
|
#生成client证书RSA私钥文件 |
|
openssl genrsa -out key.pem 4096 |
|
#生成client证书请求文件 |
|
openssl req -subj '/CN=client' -new -key key.pem -out client.csr |
|
sh -c 'echo "extendedKeyUsage=clientAuth" > extfile-client.cnf' |
|
#生成client自签证书（根据上面的client私钥文件、client证书请求文件生成） |
|
openssl x509 -req -days 36500 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem -passin "pass:$PASSWORD" -CAcreateserial -out cert.pem -extfile extfile-client.cnf |
|
#更改密钥权限 |
|
chmod 0400 ca-key.pem key.pem server-key.pem |
|
#更改密钥权限 |
|
chmod 0444 ca.pem server-cert.pem cert.pem |
|
#删除无用文件 |
|
rm client.csr server.csr |
|
echo "生成文件完成" |
|
###生成结束###
|
|
|