mirror of
https://github.com/GreptimeTeam/greptimedb.git
synced 2025-12-22 22:20:02 +00:00
0a959f9920
* refactor: move etcd tls code to `common-meta` Signed-off-by: WenyXu <wenymedia@gmail.com> * refactor: move postgre pool logic to `utils::postgre` Signed-off-by: WenyXu <wenymedia@gmail.com> * feat: setup mysql ssl options Signed-off-by: WenyXu <wenymedia@gmail.com> * feat: add test for mysql backend with tls Signed-off-by: WenyXu <wenymedia@gmail.com> * refactor: simplify certs generation Signed-off-by: WenyXu <wenymedia@gmail.com> * chore: apply suggestions Signed-off-by: WenyXu <wenymedia@gmail.com> --------- Signed-off-by: WenyXu <wenymedia@gmail.com>
42 lines
1.2 KiB
Bash
Executable File
42 lines
1.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
CERT_DIR="${1:-$(dirname "$0")/../tests-integration/fixtures/certs}"
|
|
DAYS="${2:-365}"
|
|
|
|
mkdir -p "${CERT_DIR}"
|
|
cd "${CERT_DIR}"
|
|
|
|
echo "Generating CA certificate..."
|
|
openssl req -new -x509 -days "${DAYS}" -nodes -text \
|
|
-out root.crt -keyout root.key \
|
|
-subj "/CN=GreptimeDBRootCA"
|
|
|
|
|
|
echo "Generating server certificate..."
|
|
openssl req -new -nodes -text \
|
|
-out server.csr -keyout server.key \
|
|
-subj "/CN=greptime"
|
|
|
|
openssl x509 -req -in server.csr -text -days "${DAYS}" \
|
|
-CA root.crt -CAkey root.key -CAcreateserial \
|
|
-out server.crt \
|
|
-extensions v3_req -extfile <(printf "[v3_req]\nsubjectAltName=DNS:localhost,IP:127.0.0.1")
|
|
|
|
echo "Generating client certificate..."
|
|
# Make sure the client certificate is for the greptimedb user
|
|
openssl req -new -nodes -text \
|
|
-out client.csr -keyout client.key \
|
|
-subj "/CN=greptimedb"
|
|
|
|
openssl x509 -req -in client.csr -CA root.crt -CAkey root.key -CAcreateserial \
|
|
-out client.crt -days 365 -extensions v3_req -extfile <(printf "[v3_req]\nsubjectAltName=DNS:localhost")
|
|
|
|
rm -f *.csr
|
|
|
|
echo "TLS certificates generated successfully in ${CERT_DIR}"
|
|
|
|
chmod 644 root.key
|
|
chmod 644 client.key
|
|
chmod 644 server.key
|