e241b33f26
Some checks failed
codecov / upload (push) Failing after 13m59s
CodeQL / Analyze (push) Failing after 1s
govulncheck / govulncheck (.) (push) Failing after 1s
govulncheck / govulncheck (./cmd/protoc-gen-go-grpc) (push) Failing after 1s
govulncheck / govulncheck (./gcp/observability) (push) Failing after 1s
govulncheck / govulncheck (./security/advancedtls) (push) Failing after 1s
govulncheck / govulncheck (./stats/opencensus) (push) Failing after 1s
Testing / vet-proto (push) Failing after 1s
Testing / tests (arm, latest) (push) Waiting to run
Testing / extras (latest) (push) Failing after 1s
Testing / static checks (latest-1) (push) Failing after 1s
Testing / tests (-race, latest) (push) Failing after 1s
Testing / tests (i386, latest) (push) Failing after 1s
Testing / tests (latest) (push) Failing after 1s
Testing / tests (latest-1) (push) Failing after 1s
Lock Threads / lock (push) Failing after 1s
Stale bot / stale (push) Failing after 1s
70 lines
2.6 KiB
Bash
Executable File
70 lines
2.6 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Create the server CA certs.
|
|
openssl req -x509 \
|
|
-newkey rsa:4096 \
|
|
-nodes \
|
|
-days 3650 \
|
|
-keyout ca_key.pem \
|
|
-out ca_cert.pem \
|
|
-subj /C=US/ST=CA/L=SVL/O=gRPC/CN=test-server_ca/ \
|
|
-config ./openssl.cnf \
|
|
-extensions test_ca \
|
|
-sha256
|
|
|
|
# Create the client CA certs.
|
|
openssl req -x509 \
|
|
-newkey rsa:4096 \
|
|
-nodes \
|
|
-days 3650 \
|
|
-keyout client_ca_key.pem \
|
|
-out client_ca_cert.pem \
|
|
-subj /C=US/ST=CA/L=SVL/O=gRPC/CN=test-client_ca/ \
|
|
-config ./openssl.cnf \
|
|
-extensions test_ca \
|
|
-sha256
|
|
|
|
# Generate a server cert.
|
|
openssl genrsa -out server_key.pem 4096
|
|
openssl req -new \
|
|
-key server_key.pem \
|
|
-days 3650 \
|
|
-out server_csr.pem \
|
|
-subj /C=US/ST=CA/L=SVL/O=gRPC/CN=test-server1/ \
|
|
-config ./openssl.cnf \
|
|
-reqexts test_server
|
|
openssl x509 -req \
|
|
-in server_csr.pem \
|
|
-CAkey ca_key.pem \
|
|
-CA ca_cert.pem \
|
|
-days 3650 \
|
|
-set_serial 1000 \
|
|
-out server_cert.pem \
|
|
-extfile ./openssl.cnf \
|
|
-extensions test_server \
|
|
-sha256
|
|
openssl verify -verbose -CAfile ca_cert.pem server_cert.pem
|
|
|
|
# Generate a client cert.
|
|
openssl genrsa -out client_key.pem 4096
|
|
openssl req -new \
|
|
-key client_key.pem \
|
|
-days 3650 \
|
|
-out client_csr.pem \
|
|
-subj /C=US/ST=CA/L=SVL/O=gRPC/CN=test-client1/ \
|
|
-config ./openssl.cnf \
|
|
-reqexts test_client
|
|
openssl x509 -req \
|
|
-in client_csr.pem \
|
|
-CAkey client_ca_key.pem \
|
|
-CA client_ca_cert.pem \
|
|
-days 3650 \
|
|
-set_serial 1000 \
|
|
-out client_cert.pem \
|
|
-extfile ./openssl.cnf \
|
|
-extensions test_client \
|
|
-sha256
|
|
openssl verify -verbose -CAfile client_ca_cert.pem client_cert.pem
|
|
|
|
rm *_csr.pem
|