New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update documentation for creating certificates #61

Open

grittygrease opened this issue Jun 5, 2015 · 1 comment

Contributor

grittygrease commented Jun 5, 2015

The docs currently describe how to create a self-signed cert from OpenSSL, this should be updated to a more modern practice.

Contributor Author

grittygrease commented Feb 2, 2016

For example, this works:

csr.json: {
    "hosts": [
        "localhost",
    ],
    "key": {
        "algo": "ras",
        "size": 2048
    }
    ]
}

Then run:

cfssl gencert csr-ca.json | cfssljson -bare ca
cfssl gencert -ca=ca.pem -ca-key ca-key.pem  csr-leaf.json | cfssljson -bare server

This has the advantage that you can use ro -ca ca.pem to run the ro client against a service set up with this key.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment