Forked from yuezhu/gist:47b15b4b8e944221861ccf7d7f5868f5
Last active
February 11, 2019 00:50
-
-
Save visualdensity/f7112c1624183f2016bbbf10a2577a1c to your computer and use it in GitHub Desktop.
Generate self-signed certificate for HAProxy
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Generate a unique private key (KEY) | |
sudo openssl genrsa -out mydomain.key 2048 | |
# Generating a Certificate Signing Request (CSR) | |
sudo openssl req -new -key mydomain.key -out mydomain.csr | |
# Creating a Self-Signed Certificate (CRT) | |
openssl x509 -req -days 365 -in mydomain.csr -signkey mydomain.key -out mydomain.crt | |
# Append KEY and CRT to mydomain.pem | |
sudo bash -c 'cat mydomain.key mydomain.crt >> /etc/ssl/private/mydomain.pem' | |
# Specify PEM in haproxy config | |
sudo vim /etc/haproxy/haproxy.cfg | |
listen haproxy | |
bind 0.0.0.0:443 ssl crt /etc/ssl/private/mydomain.pem |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment