summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGeorg2021-08-30 21:40:13 +0200
committerGeorg2021-08-30 21:40:13 +0200
commit8f34173c6d2629c71260ece861b297c8c2903bcf (patch)
tree59d4cd0c424dc938256f463c594f4ccc5bcc5cf6
parent4f67e2895215cc4df21f5d7b1909b2e1952fa23c (diff)
downloadsystem-8f34173c6d2629c71260ece861b297c8c2903bcf.tar.gz
system-8f34173c6d2629c71260ece861b297c8c2903bcf.tar.bz2
system-8f34173c6d2629c71260ece861b297c8c2903bcf.zip
Init CA
Signed-off-by: Georg <georg@lysergic.dev>
-rw-r--r--ca/orpheus.psyched.dev_ext.cnf14
-rw-r--r--ca/server_cert_ext.cnf15
-rw-r--r--ca/web.sun.lysergic.dev_ext.cnf13
3 files changed, 42 insertions, 0 deletions
diff --git a/ca/orpheus.psyched.dev_ext.cnf b/ca/orpheus.psyched.dev_ext.cnf
new file mode 100644
index 0000000..ae5584b
--- /dev/null
+++ b/ca/orpheus.psyched.dev_ext.cnf
@@ -0,0 +1,14 @@
+[v3_ca]
+basicConstraints = CA:FALSE
+nsCertType = server
+nsComment = "Web Server Certificate"
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer:always
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+subjectAltName = @alt_names
+[ alt_names ]
+DNS.1 = orpheus.syscid.com
+DNS.2 = auth.syscid.com
+DNS.3 = www.syscid.com
+DNS.4 = sso.syscid.com
diff --git a/ca/server_cert_ext.cnf b/ca/server_cert_ext.cnf
new file mode 100644
index 0000000..c1b870c
--- /dev/null
+++ b/ca/server_cert_ext.cnf
@@ -0,0 +1,15 @@
+[v3_ca]
+basicConstraints = CA:FALSE
+nsCertType = server
+nsComment = "LDAP01 Server Certificate"
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer:always
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+subjectAltName = @alt_names
+[ alt_names ]
+DNS.1 = ldap.syscid.com
+DNS.2 = ldap01.syscid.com
+DNS.3 = dir.syscid.com
+DNS.4 = dir01.syscid.com
+DNS.5 = gaia.syscid.com
diff --git a/ca/web.sun.lysergic.dev_ext.cnf b/ca/web.sun.lysergic.dev_ext.cnf
new file mode 100644
index 0000000..1620528
--- /dev/null
+++ b/ca/web.sun.lysergic.dev_ext.cnf
@@ -0,0 +1,13 @@
+[v3_ca]
+basicConstraints = CA:FALSE
+nsCertType = server
+nsComment = "LDAP01 Server Certificate"
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer:always
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+subjectAltName = @alt_names
+[ alt_names ]
+DNS.1 = web.sun.lysergic.dev
+DNS.2 = web.syscid.com
+DNS.3 = web