cxhercules

How to create a self-signed SSL Certificate with SubjectAltName(SAN)

After Chrome 58, self-signed certificate without SAN is not valid anymore.

Step 1: Generate a Private Key

openssl genrsa -des3 -out example.com.key 2048

Step 2: Generate a CSR (Certificate Signing Request)

cxhercules

    # Drain and delete the nodes (for each node you have)
    kubectl drain kubenode1 --delete-local-data --force --ignore-daemonsets
    kubectl delete node kubenode1

    # Reset the deployment
    sudo kubeadm reset

    # On each node

    ## Reset the nodes and weave

cxhercules

#!/bin/bash 

apt-get update
apt-get install -y git wget

# Install Docker
apt-get install \
    apt-transport-https \
    ca-certificates \
    curl \

cxhercules

#!/usr/bin/awk -f
#
# Take a PEM format file as input and split out certs and keys into separate files
#

BEGIN                          { n=0; cert=0; key=0; if ( ARGC < 2 ) { print "Usage: pem-split FILENAME"; exit 1 } }
/-----BEGIN PRIVATE KEY-----/  { key=1; cert=0 }
/-----BEGIN CERTIFICATE-----/  { cert=1; key=0 }
split_after == 1               { n++; split_after=0 }
/-----END CERTIFICATE-----/    { split_after=1 }

cxhercules

#Heading 1 ##Heading 2 ###Heading 3 ####Heading 4 #####Heading 5 ######Heading 6

---

Paragraph

cxhercules

git fetch upstream
git reset --hard upstream/master

cxhercules

#!/usr/bin/env bash
#
# Generate a set of TLS credentials that can be used to run development mode.
#
# Based on script by Ash Wilson (@smashwilson)
# https://github.com/cloudpipe/cloudpipe/pull/45/files#diff-15
#
# usage: sh ./genkeys.sh NAME HOSTNAME IP

set -o errexit

cxhercules

#!/usr/bin/env bash

# See: http://apetec.com/support/GenerateSAN-CSR.htm
# See: http://fbcs.co.uk/self-signed-multiple-domain-ssl-certificates/
# See: https://gist.github.com/scottvrosenthal/5691305

# Make a temp directory and go there
TMP_DIR=$(mktemp -d)
cd $TMP_DIR
echo $(pwd)

cxhercules

#!/bin/bash -uxe

VERSION=2.7.13.2713
PACKAGE=ActivePython-${VERSION}-linux-x86_64-glibc-2.3.6-401785

# make directory
mkdir -p /opt/bin
cd /opt

wget http://downloads.activestate.com/ActivePython/releases/${VERSION}/${PACKAGE}.tar.gz

cxhercules

package main

import (
	"crypto/md5"
	"flag"
	"fmt"
	"io"
	"launchpad.net/goamz/aws"
	"launchpad.net/goamz/s3"
	"os"