2018-01-09 01:27:15 +00:00
|
|
|
SHELL = bash
|
|
|
|
|
|
|
|
|
|
.PHONY: all
|
|
|
|
|
all: \
|
|
|
|
|
ca.pem ca-key.pem ca.csr \
|
|
|
|
|
client.pem client-key.pem client.csr \
|
|
|
|
|
dev.pem dev-key.pem dev.csr \
|
|
|
|
|
server.pem server-key.pem server.csr \
|
|
|
|
|
user.pem user-key.pem user.csr user.pfx
|
|
|
|
|
|
|
|
|
|
.PHONY: bootstrap
|
|
|
|
|
bootstrap: ## Install dependencies
|
|
|
|
|
@echo "==> Updating cfssl..."
|
|
|
|
|
go get -u github.com/cloudflare/cfssl/cmd/...
|
|
|
|
|
|
|
|
|
|
clean: ## Remove generated files
|
|
|
|
|
@echo "==> Removing generated files..."
|
|
|
|
|
rm -f \
|
|
|
|
|
ca.pem ca-key.pem ca.csr \
|
|
|
|
|
client.pem client-key.pem client.csr \
|
|
|
|
|
dev.pem dev-key.pem dev.csr \
|
|
|
|
|
server.pem server-key.pem server.csr \
|
|
|
|
|
user.pem user-key.pem user.csr user.pfx
|
|
|
|
|
|
|
|
|
|
# Generate Nomad certificate authority
|
|
|
|
|
ca.pem ca-key.pem ca.csr:
|
2019-09-17 21:05:53 +00:00
|
|
|
@echo "==> Generating Nomad certificate authority..."
|
2018-01-09 01:27:15 +00:00
|
|
|
cfssl gencert -initca ca-csr.json | cfssljson -bare ca
|
|
|
|
|
|
|
|
|
|
# Generate Nomad server certificate
|
|
|
|
|
server.pem server-key.pem server.csr:
|
|
|
|
|
@echo "==> Generating Nomad server certificate..."
|
|
|
|
|
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=cfssl.json \
|
|
|
|
|
-hostname="server.global.nomad,localhost,127.0.0.1" csr.json \
|
|
|
|
|
| cfssljson -bare server
|
|
|
|
|
|
|
|
|
|
# Generate Nomad client node certificate
|
|
|
|
|
client.pem client-key.pem client.csr:
|
|
|
|
|
@echo "==> Generating Nomad client node certificate..."
|
|
|
|
|
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=cfssl.json \
|
|
|
|
|
-hostname="client.global.nomad,localhost,127.0.0.1" csr.json \
|
|
|
|
|
| cfssljson -bare client
|
|
|
|
|
|
|
|
|
|
# Generate Nomad combined server and client node certificate
|
|
|
|
|
dev.pem dev-key.pem dev.csr:
|
|
|
|
|
@echo "==> Generating Nomad server and client node certificate..."
|
|
|
|
|
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=cfssl.json \
|
|
|
|
|
-hostname="server.global.nomad,client.global.nomad,localhost,127.0.0.1" csr.json \
|
|
|
|
|
| cfssljson -bare dev
|
|
|
|
|
|
|
|
|
|
# Generate certificates for users (CLI and browsers)
|
|
|
|
|
user.pem user-key.pem user.csr user.pfx:
|
|
|
|
|
@echo "==> Generating Nomad user certificates..."
|
|
|
|
|
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=cfssl-user.json \
|
|
|
|
|
csr.json | cfssljson -bare user
|
|
|
|
|
openssl pkcs12 -export -inkey user-key.pem -in user.pem -out user.pfx -password pass:
|
