61 lines
1.5 KiB
ReStructuredText
61 lines
1.5 KiB
ReStructuredText
cdist-type__snakeoil_cert(7)
|
|
============================
|
|
|
|
NAME
|
|
----
|
|
cdist-type__snakeoil_cert - Generate self-signed certificate
|
|
|
|
|
|
DESCRIPTION
|
|
-----------
|
|
The purpose of this type is to generate **self-signed** certificate and private key
|
|
for **testing purposes**. Certificate will expire in 3650 days.
|
|
|
|
Certificate's and key's access bits will be ``644`` and ``640`` respectively.
|
|
If target system has ``ssl-cert`` group, then it will be used as key's group.
|
|
Use ``require='__snakeoil_cert/...' __file ...`` to override.
|
|
|
|
|
|
OPTIONAL PARAMETERS
|
|
-------------------
|
|
common-name
|
|
Defaults to ``$__object_id``.
|
|
|
|
key-path
|
|
``%s`` in path will be replaced with ``$__object_id``.
|
|
Defaults to ``/etc/ssl/private/%s.pem``.
|
|
|
|
key-type
|
|
Possible values are ``rsa:$bits`` and ``ec:$name``.
|
|
For possible EC names see ``openssl ecparam -list_curves``.
|
|
Defaults to ``rsa:2048``.
|
|
|
|
cert-path
|
|
``%s`` in path will be replaced with ``$__object_id``.
|
|
Defaults to ``/etc/ssl/certs/%s.pem``.
|
|
|
|
|
|
EXAMPLES
|
|
--------
|
|
.. code-block:: sh
|
|
__snakeoil_cert localhost-rsa \
|
|
--common-name localhost \
|
|
--key-type rsa:4096
|
|
|
|
__snakeoil_cert localhost-ec \
|
|
--common-name localhost \
|
|
--key-type ec:prime256v1
|
|
|
|
|
|
AUTHORS
|
|
-------
|
|
Ander Punnar <ander-at-kvlt-dot-ee>
|
|
|
|
|
|
COPYING
|
|
-------
|
|
Copyright \(C) 2021 Ander Punnar. You can redistribute it and/or modify it
|
|
under the terms of the GNU General Public License as published by the Free
|
|
Software Foundation, either version 3 of the License, or (at your option)
|
|
any later version.
|