mirror of
https://git.dn42.dev/wiki/wiki.git
synced 2024-12-09 22:13:08 +01:00
add instruction for new CA
This commit is contained in:
parent
2d1688b61f
commit
8a9ffc771d
@ -79,15 +79,16 @@ gollum --css <path>/custom.css --gollum-path <path> --host 127.0.0.1 --port 456
|
||||
|
||||
#### SSL
|
||||
|
||||
- Generate a private key:
|
||||
- Setup your MNTNR according to [Automatic CA](https://internal.dn42/services/Automatic-CA)
|
||||
- Generate a [CSR](/services/Certificate-Authority) and send DNS Key Pin to [xuu@sour.is](mailto:xuu@sour.is):
|
||||
|
||||
`openssl genrsa -out wiki.key 4096`
|
||||
```
|
||||
./ca.dn42 tls-gen wiki.dn42 <NAME>-MNT <email> DNS:wiki.dn42,DNS:www.wiki.dn42,DNS:internal.dn42,DNS:www.internal.dn42
|
||||
```
|
||||
|
||||
- Generate a [CSR](/services/Certificate-Authority) and send `wiki.csr` to [xuu@sour.is](mailto:xuu@sour.is):
|
||||
Wait for a reply and then sign the certificate:
|
||||
|
||||
`openssl req -new -sha256 -key wiki.key -out wiki.csr`
|
||||
|
||||
Wait for a reply containing internal.dn42/wiki.dn42 certificate.
|
||||
`./ca.dn42 tls-sign wiki.dn42 MIC92-MNT`
|
||||
|
||||
#### Header
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user