wn/home-automation
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

certs scripts

Browse Source
This commit is contained in:
Wolfgang Hottgenroth
2025-11-30 16:05:41 +01:00
parent 1078e4cd53
commit 6d0f38965d
5 changed files with 54 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
tools/setup-ca.sh
View File

@@ -4,21 +4,20 @@ set -e
echo "=== mTLS CA Setup ==="
# Create CA directory
mkdir -p ca
mkdir -p certificates/ca
# Generate CA private key
echo "Generating CA private key..."
openssl genrsa -out ca/ca.key 2048
openssl genrsa -out certificates/ca/ca.key 2048
# Generate CA certificate
echo "Generating CA certificate..."
openssl req -new -x509 -days 3650 -key ca/ca.key -out ca/ca.crt \
openssl req -new -x509 -days 3650 -key certificates/ca/ca.key -out certificates/ca/ca.crt \
-subj "/DC=de/DC=hottis/DC=homea2/CN=Home Automation CA"
echo ""
echo "=== CA Setup Complete ==="
echo "CA Certificate: ca/ca.crt"
echo "CA Private Key: ca/ca.key"
echo "CA Certificate: certificates/ca/ca.crt"
echo "CA Private Key: certificates/ca/ca.key"
echo ""
echo "Deploy to Kubernetes:"
echo "kubectl create secret generic mtls-ca-cert --from-file=ca.crt=ca/ca.crt -n homea2"
echo "kubectl create secret generic mtls-ca-cert --from-file=ca.crt=certificates/ca/ca.crt -n homea2"