mengqingzhong

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

	#!/bin/bash

	###### For generate_certs.sh script ######
	export COUNTRY=US
	export STATE=California
	export CITY=Irvine
	export ORGANIZATION=YourCompany
	export UNIT=YourBU
	export COMMON_NAME=server.example.com
	export SAN_NAME_1=server.example.com

	package main

	import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"crypto/x509/pkix"
	"encoding/pem"
	"fmt"
	"math/big"