| # gRPC test client & server certificate generation |
| |
| The certificates used by the client / server for the security integration tests can be generated from within the src/main/resources/certs directory as follows. |
| |
| Create the certificate authority. |
| |
| [source,shell] |
| ---- |
| openssl genrsa -out ca.key 2048 |
| openssl req -x509 -new -key ca.key -nodes -out ca.pem -days 3650 -config ca-openssl.conf -extensions v3_req |
| ---- |
| |
| Create the client certificate. When prompted for the 'common name' use localhost as the value. It's safe to accept the defaults for the other options. |
| |
| [source,shell] |
| ---- |
| openssl genrsa -out client.key.rsa 2048 |
| openssl pkcs8 -topk8 -in client.key.rsa -out client.key -nocrypt |
| openssl req -new -key client.key -out client.csr |
| openssl x509 -req -in client.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out client.pem -outform PEM -days 5000 |
| ---- |
| |
| Create the server certificate. When prompted for the 'common name' use localhost as the value. It's safe to accept the defaults for the other options. |
| |
| [source,shell] |
| ---- |
| openssl genrsa -out server.key.rsa 2048 |
| openssl pkcs8 -topk8 -in server.key.rsa -out server.key -nocrypt |
| openssl req -new -key server.key -out server.csr |
| openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.pem -outform PEM -days 5000 |
| ---- |
| |
| Clean up. |
| |
| [source,shell] |
| ---- |
| rm -f *.rsa *.csr *.srl |
| ---- |
