istio.io/istio@v0.0.0-20240520182934-d79c90f27776/samples/jwt-server/testdata/README.MD (about)

     1  # SAN Certificate Creation with OpenSSL
     2  
     3  ### Creating CA
     4  
     5  ```
     6  openssl genrsa -out ca.key 2048
     7  
     8  openssl req -new -x509 -days 3650 -key ca.key -subj "/C=US/ST=AZ/O=Acme, Inc./CN=Acme Root CA" -out ca.crt
     9  ```
    10  
    11  ### Creating Server Certificate
    12  ```
    13  openssl req -newkey rsa:2048 -nodes -keyout server.key -subj "/C=US/ST=AZ/O=Acme, Inc./CN=*.com" -out server.csr
    14  ```
    15  
    16  ### Signing Certificate with CA
    17  ```
    18  openssl x509 -req -extfile <(printf "subjectAltName=DNS:jwt-server,DNS:localhost") -days 3650 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt
    19  ```