mirror of
https://github.com/etcd-io/etcd.git
synced 2024-09-27 06:25:44 +00:00
edfec45bf5
this demonstrates basic TLS setup with cfssl. it's much easier than other available tools.
41 lines
1019 B
Makefile
41 lines
1019 B
Makefile
.PHONY: cfssl ca req clean
|
|
|
|
CFSSL = @env PATH=$(GOPATH)/bin:$(PATH) cfssl
|
|
JSON = env PATH=$(GOPATH)/bin:$(PATH) cfssljson
|
|
|
|
all: cfssl ca req
|
|
|
|
cfssl:
|
|
go get -u -tags nopkcs11 github.com/cloudflare/cfssl/cmd/cfssl
|
|
go get -u github.com/cloudflare/cfssl/cmd/cfssljson
|
|
|
|
ca:
|
|
mkdir -p certs
|
|
$(CFSSL) gencert -initca config/ca-csr.json | $(JSON) -bare certs/ca
|
|
|
|
req:
|
|
$(CFSSL) gencert \
|
|
-ca certs/ca.pem \
|
|
-ca-key certs/ca-key.pem \
|
|
-config config/ca-config.json \
|
|
config/req-csr.json | $(JSON) -bare certs/etcd1
|
|
$(CFSSL) gencert \
|
|
-ca certs/ca.pem \
|
|
-ca-key certs/ca-key.pem \
|
|
-config config/ca-config.json \
|
|
config/req-csr.json | $(JSON) -bare certs/etcd2
|
|
$(CFSSL) gencert \
|
|
-ca certs/ca.pem \
|
|
-ca-key certs/ca-key.pem \
|
|
-config config/ca-config.json \
|
|
config/req-csr.json | $(JSON) -bare certs/etcd3
|
|
$(CFSSL) gencert \
|
|
-ca certs/ca.pem \
|
|
-ca-key certs/ca-key.pem \
|
|
-config config/ca-config.json \
|
|
config/req-csr.json | $(JSON) -bare certs/proxy1
|
|
|
|
clean:
|
|
rm -rf certs
|
|
|