1CDIST-TYPE__SNAKEOIL_CERT(7) cdist CDIST-TYPE__SNAKEOIL_CERT(7)
2
3
4
6 cdist-type__snakeoil_cert - Generate self-signed certificate
7
9 The purpose of this type is to generate self-signed certificate and
10 private key for testing purposes. Certificate will expire in 3650 days.
11
12 Certificate's and key's access bits will be 644 and 640 respectively.
13 If target system has ssl-cert group, then it will be used as key's
14 group. Use require='__snakeoil_cert/...' __file ... to override.
15
17 common-name
18 Defaults to $__object_id.
19
20 key-path
21 %s in path will be replaced with $__object_id. Defaults to
22 /etc/ssl/private/%s.pem.
23
24 key-type
25 Possible values are rsa:$bits and ec:$name. For possible EC
26 names see openssl ecparam -list_curves. Defaults to rsa:2048.
27
28 cert-path
29 %s in path will be replaced with $__object_id. Defaults to
30 /etc/ssl/certs/%s.pem.
31
33 __snakeoil_cert localhost-rsa \
34 --common-name localhost \
35 --key-type rsa:4096
36
37 __snakeoil_cert localhost-ec \
38 --common-name localhost \
39 --key-type ec:prime256v1
40
42 Ander Punnar <ander-at-kvlt-dot-ee>
43
45 Copyright (C) 2021 Ander Punnar. You can redistribute it and/or modify
46 it under the terms of the GNU General Public License as published by
47 the Free Software Foundation, either version 3 of the License, or (at
48 your option) any later version.
49
51 ungleich GmbH 2021
52
53
54
55
567.0.0 Jul 31, 2022 CDIST-TYPE__SNAKEOIL_CERT(7)