/cert-mgt

Quick script to create a CA and certificates under that CA, both in PEM and P12 format.

Primary LanguageShell

Quick script to manage/maintain a self-managed Certificate Authority and to create certificates under that CA.

First, copy the cert-mgt.conf-sample to cert-mgt.conf and make changes in there as appropriate for your environment.

Then, to create the CA:

    ./cert-mgt.sh --create-ca

To create all certificates referenced in the config file:

    ./cert-mgt.sh --create-cert all

Or, to create certificates 1 by 1:

    ./cert-mgt.sh --create-cert example.com

or with Subject Alternative Names:

    ./cert-mgt.sh --create-cert example.com --add-on "www.example.com test.example.com"

To get the CA into place:

  • CentOS:
    • Copy the .crt file to /etc/pki/ca-trust/source/anchors
    • run update-ca-trust
  • Ubuntu
    • Copy the .crt file to /usr/local/share/ca-certificates/
    • run update-ca-certificates
      • (if you remove certificates, run update-ca-certificates --fresh)

For elasticsearch:

  • You'll want to put in place the .p12 file for elasticsearch For logstash:
  • You'll want to use the .crt and .p8 files (NO passphrase).