mirror of
https://github.com/int128/kubelogin.git
synced 2026-05-21 07:12:47 +00:00
60 lines
1.0 KiB
Makefile
60 lines
1.0 KiB
Makefile
EXPIRY := 3650
|
|
|
|
all: ca.key ca.crt server.key server.crt jws.key
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
-rm -v ca.* server.* jws.*
|
|
|
|
ca.key:
|
|
openssl genrsa -out $@ 1024
|
|
|
|
.INTERMEDIATE: ca.csr
|
|
ca.csr: openssl.cnf ca.key
|
|
openssl req -config openssl.cnf \
|
|
-new \
|
|
-key ca.key \
|
|
-subj "/CN=Hello CA" \
|
|
-out $@
|
|
openssl req -noout -text -in $@
|
|
|
|
ca.crt: ca.csr ca.key
|
|
openssl x509 \
|
|
-req \
|
|
-days $(EXPIRY) \
|
|
-signkey ca.key \
|
|
-in ca.csr \
|
|
-out $@
|
|
openssl x509 -text -in $@
|
|
|
|
server.key:
|
|
openssl genrsa -out $@ 1024
|
|
|
|
.INTERMEDIATE: server.csr
|
|
server.csr: openssl.cnf server.key
|
|
openssl req -config openssl.cnf \
|
|
-new \
|
|
-key server.key \
|
|
-subj "/CN=localhost" \
|
|
-out $@
|
|
openssl req -noout -text -in $@
|
|
|
|
server.crt: openssl.cnf server.csr ca.key ca.crt
|
|
rm -fr ./CA
|
|
mkdir -p ./CA
|
|
touch CA/index.txt
|
|
touch CA/index.txt.attr
|
|
echo 00 > CA/serial
|
|
openssl ca -config openssl.cnf \
|
|
-days $(EXPIRY) \
|
|
-extensions v3_req \
|
|
-batch \
|
|
-cert ca.crt \
|
|
-keyfile ca.key \
|
|
-in server.csr \
|
|
-out $@
|
|
openssl x509 -text -in $@
|
|
|
|
jws.key:
|
|
openssl genrsa -out $@ 1024
|