1CDIST-TYPE__SNAKEOIL_CERT(7)         cdist        CDIST-TYPE__SNAKEOIL_CERT(7)
2
3
4

NAME

6       cdist-type__snakeoil_cert - Generate self-signed certificate
7

DESCRIPTION

9       The  purpose  of  this  type is to generate self-signed certificate and
10       private key for testing purposes. Certificate will expire in 3650 days.
11
12       Certificate's and key's access bits will be 644 and  640  respectively.
13       If  target  system  has  ssl-cert  group, then it will be used as key's
14       group.  Use require='__snakeoil_cert/...' __file ... to override.
15

OPTIONAL PARAMETERS

17       common-name
18              Defaults to $__object_id.
19
20       key-path
21              %s in path will be  replaced  with  $__object_id.   Defaults  to
22              /etc/ssl/private/%s.pem.
23
24       key-type
25              Possible  values  are  rsa:$bits  and ec:$name.  For possible EC
26              names see openssl ecparam -list_curves.  Defaults to rsa:2048.
27
28       cert-path
29              %s in path will be  replaced  with  $__object_id.   Defaults  to
30              /etc/ssl/certs/%s.pem.
31

EXAMPLES

33          __snakeoil_cert localhost-rsa \
34              --common-name localhost \
35              --key-type rsa:4096
36
37          __snakeoil_cert localhost-ec \
38              --common-name localhost \
39              --key-type ec:prime256v1
40

AUTHORS

42       Ander Punnar <ander-at-kvlt-dot-ee>
43

COPYING

45       Copyright  (C) 2021 Ander Punnar. You can redistribute it and/or modify
46       it under the terms of the GNU General Public License  as  published  by
47       the  Free  Software Foundation, either version 3 of the License, or (at
48       your option) any later version.
49
51       ungleich GmbH 2021
52
53
54
55
566.9.8                            Aug 24, 2021     CDIST-TYPE__SNAKEOIL_CERT(7)
Impressum