timescaledb/scripts/generate_ca_cert.sh
Dmitry Simonenko f7a39c6deb Support SSL with Certificate Based Authentication
Add a tunable way to support SSL connections to data nodes
with optional certificate based authentication.

Switch test suite to use pre-generated certificates.
2020-05-27 17:31:09 +02:00

14 lines
342 B
Bash
Executable File

#!/bin/sh
CA_FILE_PREFIX=${CA_FILE_PREFIX:-ts_ca}
CA_KEY=${CA_KEY:-${CA_FILE_PREFIX}.key}
CA_CRT=${CA_CRT:-${CA_FILE_PREFIX}.crt}
# Generate CA private key
openssl genrsa -out ${CA_KEY} 2048
# Generate CA certificate
openssl req -new -x509 -days 1095 \
-subj '/C=SE/ST=Stockholm/L=Stockholm/O=TSCA/CN=TSCA' \
-key ts_ca.key -out ${CA_CRT}