Files
FTL/tools/gen_tls_cert.sh
DL6ER 064ac81fca Add SSL/TLS support (mbedTLS)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-03-08 21:10:12 +01:00

16 lines
590 B
Bash

#!/bin/bash
# This script generates a self-signed certificate valid for 10 years
openssl req -new -newkey rsa:4096 -days 3650 -nodes -x509 \
-subj "/C=DE/ST=NRW/L=Bonn/O=Pi.hole/CN=pi.hole" \
-keyout pihole.key -out pihole.crt
# Alternatively, generate a ECDSA certificate
# openssl ecparam -out pihole.key -name prime256v1 -genkey
# openssl req -new -days 3650 -nodes -x509 \
# -subj "/C=DE/ST=NRW/L=Bonn/O=Pi.hole/CN=pi.hole" \
# -key pihole.key -out pihole.cert
# Combine key and certificate into a single PEM file
cp pihole.crt pihole.pem
cat pihole.key >> pihole.pem