diff options
| author | Chris Evich <cevich@redhat.com> | 2019-03-20 13:28:53 -0400 |
|---|---|---|
| committer | Chris Evich <cevich@redhat.com> | 2019-03-20 13:36:17 -0400 |
| commit | 148046745ac76342c22fe025e1593bc45252512d (patch) | |
| tree | 56b02fab50fff52ebaa0edf6f4cb69bf3cdae26f /test/certs/README.md | |
| parent | bae1561c992f5a5a96c69c072d21a3d416cd95b9 (diff) | |
| download | podman-148046745ac76342c22fe025e1593bc45252512d.tar.gz podman-148046745ac76342c22fe025e1593bc45252512d.tar.bz2 podman-148046745ac76342c22fe025e1593bc45252512d.zip | |
Add new key and never-expiring test certificate
Former `domain.crt` was created with a one-year life and expired causing
all testing to fail. Create a replacement, along with configuration and
documentation on how to make a new certificate if ever required.
Signed-off-by: Chris Evich <cevich@redhat.com>
Diffstat (limited to 'test/certs/README.md')
| -rw-r--r-- | test/certs/README.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/test/certs/README.md b/test/certs/README.md new file mode 100644 index 000000000..3aab01440 --- /dev/null +++ b/test/certs/README.md @@ -0,0 +1,9 @@ +# How to generate key and cert: + +## Make private key without a password + +certtool --rsa --generate-privkey --null-password --outfile=domain.key + +## Use ``domain.cfg`` template to make self-signed cert + +certtool --generate-self-signed --load-privkey=domain.key --template=domain.cfg --outfile=domain.crt --load-ca-privkey=domain.key --null-password --no-text |