Merge branch 'tienda' into 'antifascista'

Instalar certificados localmente

See merge request sutty/haini.sh!19
This commit is contained in:
Maki 2021-07-13 18:18:51 +00:00
commit 2bf1868e0f
2 changed files with 5 additions and 3 deletions

View file

@ -59,7 +59,7 @@ generar_certificado() {
chmod 700 "$ENTORNO/etc/ssl/private" chmod 700 "$ENTORNO/etc/ssl/private"
ca_key="/etc/ssl/private/ca-sutty.key" ca_key="/etc/ssl/private/ca-sutty.key"
ca_crt="/etc/ssl/certs/ca-sutty.crt" ca_crt="/usr/local/share/ca-certificates/ca-sutty.crt"
domain_key="/etc/ssl/private/sutty.local.key" domain_key="/etc/ssl/private/sutty.local.key"
domain_csr="/etc/ssl/private/sutty.local.csr" domain_csr="/etc/ssl/private/sutty.local.csr"
@ -87,6 +87,8 @@ generar_certificado() {
-subj '/C=IN/ST=Cyberspace/L=Cyberspace/O=Sutty/OU=Espacio/CN=Sutty Local CA' \ -subj '/C=IN/ST=Cyberspace/L=Cyberspace/O=Sutty/OU=Espacio/CN=Sutty Local CA' \
-days 3650 -out $ca_crt" -days 3650 -out $ca_crt"
correr "update-ca-certificates"
correr "openssl req -nodes -newkey rsa:2048 -keyout $domain_key -out $domain_csr \ correr "openssl req -nodes -newkey rsa:2048 -keyout $domain_key -out $domain_csr \
-subj '/C=IN/ST=Cyberspace/L=Cyberspace/O=Sutty/OU=Espacio/CN=sutty.local/CN=*.sutty.local'" -subj '/C=IN/ST=Cyberspace/L=Cyberspace/O=Sutty/OU=Espacio/CN=sutty.local/CN=*.sutty.local'"
correr "openssl x509 -req -in $domain_csr \ correr "openssl x509 -req -in $domain_csr \

View file

@ -2,8 +2,8 @@ server {
server_name ~(?<domain>.+).sutty.local; server_name ~(?<domain>.+).sutty.local;
listen 4000 ssl http2 default_server; listen 4000 ssl http2 default_server;
ssl_certificate /Sutty/sutty.local/domain/sutty.local.crt; ssl_certificate /etc/ssl/certs/sutty.local.crt;
ssl_certificate_key /Sutty/sutty.local/domain/sutty.local.key; ssl_certificate_key /etc/ssl/private/sutty.local.key;
root /Sutty/$domain-jekyll-theme/_site; root /Sutty/$domain-jekyll-theme/_site;