mirror of
https://github.com/rustfs/rustfs.git
synced 2026-07-27 16:48:58 +00:00
houseme
48 lines
1.5 KiB
Markdown
48 lines
1.5 KiB
Markdown
## Certs
|
||
|
||
### Generate a self-signed certificate
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes
|
||
```
|
||
|
||
### Generate a self-signed certificate with a specific subject
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes \
|
||
-subj "/C=US/ST=California/L=San Francisco/O=My Company/CN=mydomain.com"
|
||
```
|
||
|
||
### Generate a self-signed certificate with a specific subject and SAN
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes \
|
||
-subj "/C=US/ST=California/L=San Francisco/O=My Company/CN=mydomain.com" \
|
||
-addext "subjectAltName=DNS:mydomain.com,DNS:www.mydomain.com"
|
||
```
|
||
|
||
### Generate a self-signed certificate with a specific subject and SAN (multiple SANs)
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes \
|
||
-subj "/C=US/ST=California/L=San Francisco/O=My Company/CN=mydomain.com" \
|
||
-addext "subjectAltName=DNS:mydomain.com,DNS:www.mydomain.com,DNS:api.mydomain.com"
|
||
```
|
||
|
||
### TLS File
|
||
|
||
```text
|
||
cd deploy/certs/
|
||
ls -la
|
||
├── rustfs_cert.pem // Default｜fallback certificate
|
||
├── rustfs_key.pem // Default｜fallback private key
|
||
├── example.com/ // certificate directory of specific domain names
|
||
│ ├── rustfs_cert.pem
|
||
│ └── rustfs_key.pem
|
||
├── api.example.com/
|
||
│ ├── rustfs_cert.pem
|
||
│ └── rustfs_key.pem
|
||
└── cdn.example.com/
|
||
├── rustfs_cert.pem
|
||
└── rustfs_key.pem
|
||
``` |