Update genkeys.sh to generate ed25519 keys instead of RSA

This commit is contained in:
Alex Auvolat 2021-07-06 11:11:18 +02:00
parent fa394dcd27
commit 740b863750
No known key found for this signature in database
GPG key ID: EDABF9711E244EB1

View file

@ -11,7 +11,7 @@ cd pki
# the RPC protocol will use to authenticate the other side. # the RPC protocol will use to authenticate the other side.
if [ ! -f garage-ca.key ]; then if [ ! -f garage-ca.key ]; then
echo "Generating Garage CA keys..." echo "Generating Garage CA keys..."
openssl genrsa -out garage-ca.key 4096 openssl genpkey -algorithm ED25519 -out garage-ca.key
openssl req -x509 -new -nodes -key garage-ca.key -sha256 -days 3650 -out garage-ca.crt -subj "/C=FR/O=Garage" openssl req -x509 -new -nodes -key garage-ca.key -sha256 -days 3650 -out garage-ca.crt -subj "/C=FR/O=Garage"
fi fi
@ -22,7 +22,7 @@ fi
if [ ! -f garage.crt ]; then if [ ! -f garage.crt ]; then
echo "Generating Garage agent keys..." echo "Generating Garage agent keys..."
if [ ! -f garage.key ]; then if [ ! -f garage.key ]; then
openssl genrsa -out garage.key 4096 openssl genpkey -algorithm ED25519 -out garage.key
fi fi
openssl req -new -sha256 -key garage.key -subj "/C=FR/O=Garage/CN=garage" \ openssl req -new -sha256 -key garage.key -subj "/C=FR/O=Garage/CN=garage" \
-out garage.csr -out garage.csr
@ -56,7 +56,7 @@ fi
if [ ! -f garage-client.crt ]; then if [ ! -f garage-client.crt ]; then
echo "Generating Garage client keys..." echo "Generating Garage client keys..."
if [ ! -f garage-client.key ]; then if [ ! -f garage-client.key ]; then
openssl genrsa -out garage-client.key 4096 openssl genpkey -algorithm ED25519 -out garage-client.key
fi fi
openssl req -new -sha256 -key garage-client.key -subj "/C=FR/O=Garage" \ openssl req -new -sha256 -key garage-client.key -subj "/C=FR/O=Garage" \
-out garage-client.csr -out garage-client.csr