server content
This commit is contained in:
@@ -21,7 +21,7 @@ Connect solely through wireguard to `192.168.1.142` and serve the REST server wi
|
||||
Generate a new private key and (public) certificate
|
||||
|
||||
```
|
||||
step ca certificate soteria.john-stream.com certs/foo.crt certs/foo.key --provisioner admin
|
||||
step ca certificate soteria.john-stream.com certs/soteria.crt certs/soteria.key --provisioner admin
|
||||
```
|
||||
|
||||
One-time setup for Caddy to be able to trust the Janus CA. This creates a symlink for the root CA.
|
||||
@@ -32,11 +32,11 @@ ln -s $(step path)/certs/root_ca.crt certs/root_ca.crt
|
||||
|
||||
Check certificate
|
||||
```
|
||||
openssl x509 -in certs/foo.crt -noout -subject -issuer -ext extendedKeyUsage
|
||||
openssl x509 -noout -subject -issuer -ext extendedKeyUsage -in certs/soteria.crt
|
||||
```
|
||||
|
||||
```
|
||||
cat certs/foo.crt certs/foo.key > $(step path)/certs/soteria.pem
|
||||
cat certs/soteria.crt certs/soteria.key > $(step path)/certs/soteria.pem
|
||||
```
|
||||
|
||||
Add to ~/.bashrc to trust the Janus CA:
|
||||
|
||||
Reference in New Issue
Block a user