github.com/cockroachdb/cockroach@v20.2.0-alpha.1+incompatible/pkg/security/securitytest/test_certs/README.md (about)

     1  ** Test certificates directory **
     2  
     3  Contains the following files:
     4  
     5  * ca.crt: CA certificate
     6  * ca.key: CA private key
     7  * node.crt: node client/server certificate
     8  * node.key: node client/server private key
     9  * client.root.crt: admin client certificate
    10  * client.root.key: admin client private key
    11  * client.testuser.crt: testing user certificate
    12  * client.testuser.key: testing user private key
    13  *
    14  
    15  For a human-readable version of the certificate, run:
    16  ```bash
    17  openssl x509 -in node.crt -text
    18  ```
    19  
    20  To regenerate:
    21  ```bash
    22  rm -f pkg/security/securitytest/test_certs/*.{crt,key}
    23  ./cockroach cert --certs-dir=pkg/security/securitytest/test_certs --ca-key=pkg/security/securitytest/test_certs/ca.key create-ca
    24  ./cockroach cert --certs-dir=pkg/security/securitytest/test_certs --ca-key=pkg/security/securitytest/test_certs/ca.key create-node 127.0.0.1 ::1 localhost *.local
    25  ./cockroach cert --certs-dir=pkg/security/securitytest/test_certs --ca-key=pkg/security/securitytest/test_certs/ca.key create-client root
    26  ./cockroach cert --certs-dir=pkg/security/securitytest/test_certs --ca-key=pkg/security/securitytest/test_certs/ca.key create-client testuser
    27  make generate PKG=./pkg/security/securitytest
    28  ```