mk-ssl-cert.sh
· 490 B · Bash
原始檔案
#!/bin/bash
set -euo pipefail
source .env
SSL_FQDN=${SSL_DOMAIN:?Insert hostname this certificate is for}
SSL_CN=${SSL_COMMON_NAME:?Insert common name for this certificate}
printf "Creating self-signed SSL certificate...\n"
openssl req -x509 -nodes -newkey rsa:2048 -keyout "/usr/local/share/ca-certificates/${SSL_FQDN}.key" -out "/usr/local/share/ca-certificates/${SSL_FQDN}.crt" -days 365 -subj "/CN=${SSL_CN}"
printf "Updating system's trusted certificates...\n"
update-ca-certificates
| 1 | #!/bin/bash |
| 2 | set -euo pipefail |
| 3 | |
| 4 | source .env |
| 5 | SSL_FQDN=${SSL_DOMAIN:?Insert hostname this certificate is for} |
| 6 | SSL_CN=${SSL_COMMON_NAME:?Insert common name for this certificate} |
| 7 | |
| 8 | printf "Creating self-signed SSL certificate...\n" |
| 9 | openssl req -x509 -nodes -newkey rsa:2048 -keyout "/usr/local/share/ca-certificates/${SSL_FQDN}.key" -out "/usr/local/share/ca-certificates/${SSL_FQDN}.crt" -days 365 -subj "/CN=${SSL_CN}" |
| 10 | printf "Updating system's trusted certificates...\n" |
| 11 | update-ca-certificates |