c766727d1d
- more inline documentation - don't explicitly specify audience - approver is optional in `generate_key` - ADD -> RUN for better caching of jwtproxy
10 lines
320 B
Bash
Executable file
10 lines
320 B
Bash
Executable file
#! /bin/bash
|
|
set -e
|
|
|
|
# Create certs for jwtproxy to mitm outgoing TLS connections
|
|
echo '{"CN":"CA","key":{"algo":"rsa","size":2048}}' | cfssl gencert -initca - | cfssljson -bare mitm
|
|
cp mitm-key.pem /conf/mitm.key
|
|
cp mitm.pem /conf/mitm.cert
|
|
cp mitm.pem /usr/local/share/ca-certificates/mitm.crt
|
|
|
|
update-ca-certificates
|