httpd/httpd-ssl-gencerts
Joe Orton 45393c8877 use sscg defaults; append CA cert to generated cert
document httpd-init.service in httpd-init.service(8)
2017-10-03 10:04:03 +01:00

23 lines
814 B
Bash
Executable File

#!/usr/bin/bash
set -e
FQDN=`hostname`
if test -f /etc/pki/tls/certs/localhost.crt -o \
-f /etc/pki/tls/private/localhost.key -o \
-f /etc/pki/tls/certs/localhost-ca.crt; then
exit 1
fi
sscg -q \
--cert-file /etc/pki/tls/certs/localhost.crt \
--cert-key-file /etc/pki/tls/private/localhost.key \
--ca-file /etc/pki/tls/certs/localhost-ca.crt \
--lifetime 365 \
--hostname $FQDN \
--email root@$FQDN
# mod_ssl will send the CA cert if it's appended to the server cert.
cat /etc/pki/tls/certs/localhost-ca.crt >> /etc/pki/tls/certs/localhost.crt