fix: self-signed cert for grpc endpoint

Logflare · Nov 20, 2024 · 17094f6 · 17094f6
1 parent 524709f
commit 17094f6
Show file tree

Hide file tree

Showing 16 changed files with 4 additions and 11 deletions.
diff --git a/Makefile b/Makefile
@@ -231,13 +231,8 @@ ssl.staging: CERT_DOMAIN = logflarestaging.com
 
 $(addprefix ssl.,${envs}): ssl.%:
 	@echo "Generating self-signed certificate..."
-	@echo "Generating server private key (cert.key) and certificate signing request (req.pem)"
-	@openssl req -newkey rsa:2048 -nodes -days 365000 -keyout .$*.cert.key -out .$*.req.pem \
-		-subj  "/C=US/ST=DE/O=Supabase/OU=Logflare/CN=$(CERT_DOMAIN)"
-	@echo "Signing cert.pem using private key and CSR"
-	@openssl x509 -req -days 12783 -set_serial 1 \
-		-in .$*.req.pem -signkey .$*.cert.key -out .$*.cert.pem \
-		-CA .$*.cacert.pem -CAkey .$*.cacert.key
-
+	@openssl req -x509 -newkey rsa:2048 -keyout .$*.cert.key -out .$*.cert.pem -days 3650 \
+		-nodes -subj "/C=US/ST=DE/O=Supabase/OU=Logflare/CN=$(CERT_DOMAIN)"
+
 
 .PHONY: $(addprefix ssl.,${envs})
diff --git a/cloudbuild/.prod.cert.key.enc b/cloudbuild/.prod.cert.key.enc
diff --git a/cloudbuild/.prod.cert.pem.enc b/cloudbuild/.prod.cert.pem.enc
diff --git a/cloudbuild/.prod.db-client-cert.pem.enc b/cloudbuild/.prod.db-client-cert.pem.enc
diff --git a/cloudbuild/.prod.db-client-key.pem.enc b/cloudbuild/.prod.db-client-key.pem.enc
diff --git a/cloudbuild/.prod.db-server-ca.pem.enc b/cloudbuild/.prod.db-server-ca.pem.enc
diff --git a/cloudbuild/.prod.env.enc b/cloudbuild/.prod.env.enc
diff --git a/cloudbuild/.prod.gcloud.json.enc b/cloudbuild/.prod.gcloud.json.enc
diff --git a/cloudbuild/.staging.cert.key.enc b/cloudbuild/.staging.cert.key.enc
diff --git a/cloudbuild/.staging.cert.pem.enc b/cloudbuild/.staging.cert.pem.enc
diff --git a/cloudbuild/.staging.db-client-cert.pem.enc b/cloudbuild/.staging.db-client-cert.pem.enc
diff --git a/cloudbuild/.staging.db-client-key.pem.enc b/cloudbuild/.staging.db-client-key.pem.enc
diff --git a/cloudbuild/.staging.db-server-ca.pem.enc b/cloudbuild/.staging.db-server-ca.pem.enc
diff --git a/cloudbuild/.staging.env.enc b/cloudbuild/.staging.env.enc
diff --git a/cloudbuild/.staging.gcloud.json.enc b/cloudbuild/.staging.gcloud.json.enc
diff --git a/config/runtime.exs b/config/runtime.exs
@@ -230,10 +230,8 @@ if(
 ) do
   config :logflare,
     ssl: [
-      cacerts: :public_key.cacerts_get(),
       certfile: "cert.pem",
-      keyfile: "cert.key",
-      verify: :verify_peer
+      keyfile: "cert.key"
     ]
 end