mirror of
https://github.com/openoms/joininbox.git
synced 2026-08-13 12:33:14 +02:00
b5bc21ad7b
* jam-remote re-activate code signing check * chore(install.selfsignedcert.sh): non-interactive script
23 lines
701 B
Bash
23 lines
701 B
Bash
#!/bin/bash
|
|
# script to create a self-signed SSL certificate
|
|
|
|
USERNAME=jam
|
|
|
|
sudo apt-get install -y nginx
|
|
|
|
if ! sudo ls /home/jam/nginx/tls.cert || ! sudo ls /home/jam/nginx/tls.key; then
|
|
sudo apt-get install -y openssl
|
|
|
|
subj="/C=US/ST=Utah/L=Lehi/O=Your Company, Inc./OU=IT/CN=example.com"
|
|
sudo -u $USERNAME mkdir -p /home/jam/nginx/ \
|
|
&& pushd "$_" \
|
|
&& sudo -u $USERNAME openssl req -newkey rsa:4096 -x509 -sha256 -days 3650 -nodes -out tls.cert -keyout tls.key -subj "$subj" \
|
|
&& popd || exit 1
|
|
|
|
else
|
|
echo " /home/jam/nginx/tls.key and tls.cert are already present"
|
|
fi
|
|
|
|
if ! sudo ls /etc/ssl/certs/dhparam.pem; then
|
|
sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048
|
|
fi
|