# cfssl

**Repository Path**: yonchin/cfssl

## Basic Information

- **Project Name**: cfssl
- **Description**: No description available
- **Primary Language**: Docker
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2017-09-27
- **Last Updated**: 2020-12-19

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# cfssl 使用案例

## CA
### 创建ca-config.json文件
    cat > ca-config.json <<EOF
    {
        "signing": {
            "default": {
                "expiry": "87600h"
            },
            "profiles": {
                "yzh": {
                    "expiry": "87600h",
                    "usages": [
                        "signing",
                        "key encipherment",
                        "server auth",
                        "client auth"
                    ]
                }
            }
        }
    }
    EOF

### 创建ca-csr.json文件
    cat > ca-csr.json <<EOF
    {
        "CN": "yzh",
        "key": {
            "algo": "rsa",
            "size": 2048
        },
        "names": [
            {
            "C": "CN",
            "ST": "ShangHai",
            "L": "ShangHai",
            "O": "yzh",
            "OU": "DevOps"
            }
        ]
    }
    EOF

### 生成ca证书和私钥
    cfssl gencert -initca ca-csr.json | cfssljson -bare ca

## etcd
### 创建etcd-csr.json
    cat > etcd-csr.json <<EOF
    {
        "CN": "etcd",
        "hosts": [
           "127.0.0.1",
           $etcdnodesToJson
        ],
        "key": {
            "algo": "rsa",
            "size": 2048
        },
        "names": [
            {
                "C": "CN",
                "ST": "ShangHai",
                "L": "ShangHai",
                "O": "yzh",
                "OU": "DevOps"
            }
        ]
    }
    EOF

### 生成etcd证书和私钥
    cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=yzh etcd-csr.json | cfssljson -bare etcd