mirror of
http://github.com/valkey-io/valkey
synced 2024-11-21 08:37:40 +00:00
0d2ba9b94d
Reference: https://github.com/valkey-io/valkey-doc/blob/main/topics/encryption.md Before we runtest --tls, we need first run utils/gen-test-certs.sh I found there are some redis legacy word there, update them. Signed-off-by: hwware <wen.hui.ware@gmail.com>
59 lines
1.8 KiB
Bash
Executable File
59 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Generate some test certificates which are used by the regression test suite:
|
|
#
|
|
# tests/tls/ca.{crt,key} Self signed CA certificate.
|
|
# tests/tls/valkey.{crt,key} A certificate with no key usage/policy restrictions.
|
|
# tests/tls/client.{crt,key} A certificate restricted for SSL client usage.
|
|
# tests/tls/server.{crt,key} A certificate restricted for SSL server usage.
|
|
# tests/tls/valkey.dh DH Params file.
|
|
|
|
generate_cert() {
|
|
local name=$1
|
|
local cn="$2"
|
|
local opts="$3"
|
|
|
|
local keyfile=tests/tls/${name}.key
|
|
local certfile=tests/tls/${name}.crt
|
|
|
|
[ -f $keyfile ] || openssl genrsa -out $keyfile 2048
|
|
openssl req \
|
|
-new -sha256 \
|
|
-subj "/O=Valkey Test/CN=$cn" \
|
|
-key $keyfile | \
|
|
openssl x509 \
|
|
-req -sha256 \
|
|
-CA tests/tls/ca.crt \
|
|
-CAkey tests/tls/ca.key \
|
|
-CAserial tests/tls/ca.txt \
|
|
-CAcreateserial \
|
|
-days 365 \
|
|
$opts \
|
|
-out $certfile
|
|
}
|
|
|
|
mkdir -p tests/tls
|
|
[ -f tests/tls/ca.key ] || openssl genrsa -out tests/tls/ca.key 4096
|
|
openssl req \
|
|
-x509 -new -nodes -sha256 \
|
|
-key tests/tls/ca.key \
|
|
-days 3650 \
|
|
-subj '/O=Valkey Test/CN=Certificate Authority' \
|
|
-out tests/tls/ca.crt
|
|
|
|
cat > tests/tls/openssl.cnf <<_END_
|
|
[ server_cert ]
|
|
keyUsage = digitalSignature, keyEncipherment
|
|
nsCertType = server
|
|
|
|
[ client_cert ]
|
|
keyUsage = digitalSignature, keyEncipherment
|
|
nsCertType = client
|
|
_END_
|
|
|
|
generate_cert server "Server-only" "-extfile tests/tls/openssl.cnf -extensions server_cert"
|
|
generate_cert client "Client-only" "-extfile tests/tls/openssl.cnf -extensions client_cert"
|
|
generate_cert valkey "Generic-cert"
|
|
|
|
[ -f tests/tls/valkey.dh ] || openssl dhparam -out tests/tls/valkey.dh 2048
|