Complete project pivot (#55)

Complete project pivot
This commit is contained in:
2022-01-12 08:57:21 +01:00
committed by GitHub
parent 40673c8ad3
commit 38231b70e6
46 changed files with 2638 additions and 1396 deletions

23
scripts/generate_fake_ca.sh Executable file
View File

@@ -0,0 +1,23 @@
#!/bin/bash
set -e
openssl ecparam -name secp384r1 -genkey -noout -out ca.key
openssl req -new -x509 -key ca.key -out ca.crt -days 365 -config <(
cat <<-EOF
[req]
distinguished_name = req_distinguished_name
default_md = sha512
req_extensions = v3_req
prompt = no
[req_distinguished_name]
C = SE
O = Speedrun
CN = Fake CA
[v3_req]
subjectKeyIdentifier=hash
basicConstraints=critical,CA:TRUE
keyUsage=critical,keyCertSign,cRLSign
EOF
) -extensions v3_req

46
scripts/generate_portal_cert.sh Executable file
View File

@@ -0,0 +1,46 @@
#!/bin/bash
set -e
openssl ecparam -name secp384r1 -genkey -noout -out portal.key
openssl req -new -key portal.key -out portal.csr -config <(
cat <<-EOF
[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no
[req_distinguished_name]
C = SE
O = Speedrun
CN = portal
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
IP.1 = 34.74.21.99
EOF
)
openssl x509 -req -in portal.csr -CA ca.crt -CAkey ca.key -out portal.crt -days 365 -sha512 -CAcreateserial -extensions v3_req -extfile <(
cat <<-EOF
[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no
[req_distinguished_name]
C = SE
O = Speedrun
CN = portal
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
IP.1 = 34.74.21.99
EOF
)
rm portal.csr

View File

@@ -0,0 +1,40 @@
#!/bin/bash
set -e
openssl ecparam -name secp384r1 -genkey -noout -out speedrun.key
openssl req -new -key speedrun.key -out speedrun.csr -config <(
cat <<-EOF
[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no
[req_distinguished_name]
C = SE
O = Speedrun
CN = speedrun
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = clientAuth
EOF
)
openssl x509 -req -in speedrun.csr -CA ca.crt -CAkey ca.key -out speedrun.crt -days 365 -sha512 -CAcreateserial -extensions v3_req -extfile <(
cat <<-EOF
[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no
[req_distinguished_name]
C = SE
O = Speedrun
CN = speedrun
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = clientAuth
EOF
)
rm speedrun.csr