Update genkeys.sh to generate ed25519 keys instead of RSA
This commit is contained in:
parent
fa394dcd27
commit
740b863750
1 changed files with 3 additions and 3 deletions
|
@ -11,7 +11,7 @@ cd pki
|
||||||
# the RPC protocol will use to authenticate the other side.
|
# the RPC protocol will use to authenticate the other side.
|
||||||
if [ ! -f garage-ca.key ]; then
|
if [ ! -f garage-ca.key ]; then
|
||||||
echo "Generating Garage CA keys..."
|
echo "Generating Garage CA keys..."
|
||||||
openssl genrsa -out garage-ca.key 4096
|
openssl genpkey -algorithm ED25519 -out garage-ca.key
|
||||||
openssl req -x509 -new -nodes -key garage-ca.key -sha256 -days 3650 -out garage-ca.crt -subj "/C=FR/O=Garage"
|
openssl req -x509 -new -nodes -key garage-ca.key -sha256 -days 3650 -out garage-ca.crt -subj "/C=FR/O=Garage"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
@ -22,7 +22,7 @@ fi
|
||||||
if [ ! -f garage.crt ]; then
|
if [ ! -f garage.crt ]; then
|
||||||
echo "Generating Garage agent keys..."
|
echo "Generating Garage agent keys..."
|
||||||
if [ ! -f garage.key ]; then
|
if [ ! -f garage.key ]; then
|
||||||
openssl genrsa -out garage.key 4096
|
openssl genpkey -algorithm ED25519 -out garage.key
|
||||||
fi
|
fi
|
||||||
openssl req -new -sha256 -key garage.key -subj "/C=FR/O=Garage/CN=garage" \
|
openssl req -new -sha256 -key garage.key -subj "/C=FR/O=Garage/CN=garage" \
|
||||||
-out garage.csr
|
-out garage.csr
|
||||||
|
@ -56,7 +56,7 @@ fi
|
||||||
if [ ! -f garage-client.crt ]; then
|
if [ ! -f garage-client.crt ]; then
|
||||||
echo "Generating Garage client keys..."
|
echo "Generating Garage client keys..."
|
||||||
if [ ! -f garage-client.key ]; then
|
if [ ! -f garage-client.key ]; then
|
||||||
openssl genrsa -out garage-client.key 4096
|
openssl genpkey -algorithm ED25519 -out garage-client.key
|
||||||
fi
|
fi
|
||||||
openssl req -new -sha256 -key garage-client.key -subj "/C=FR/O=Garage" \
|
openssl req -new -sha256 -key garage-client.key -subj "/C=FR/O=Garage" \
|
||||||
-out garage-client.csr
|
-out garage-client.csr
|
||||||
|
|
Loading…
Reference in a new issue