最後活躍 2 months ago

修訂 08a8c84afbe3d2a7dfde5ee2ae38e9072498ef73

mk-ssl-cert 原始檔案
1#!/bin/bash
2set -euo pipefail
3
4source .env
5SSL_FQDN=${SSL_DOMAIN:?Specify the FQDN you are creating these certificates for}
6SSL_COMMON_NAME=${SSL_INPUT:?Specify the common name being registered under this certificate}
7printf "Creating self-signed SSL certificate...\n"
8openssl req -x509 -nodes -newkey rsa:2048 -keyout "/usr/local/share/ca-certificates/${SSL_FQDN}.key" -out "/usr/local/share/ca-certificates/${SSL_FQDN}.crt" -days 365 -subj "/CN=${SSL_COMMON_NAME}"
9printf "Updating system's trusted certificates...\n"
10update-ca-certificates