From db1ed1e2d56957cad75a2d7609eb6a55f54315b5 Mon Sep 17 00:00:00 2001 From: Beth Skurrie Date: Thu, 30 Jan 2020 14:05:18 +1100 Subject: [PATCH] docs: comment --- .../generate-certificates-for-webooks-certificate-spec.rb | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/script/generate-certificates-for-webooks-certificate-spec.rb b/script/generate-certificates-for-webooks-certificate-spec.rb index 5e4ae5d28..bd4bc2407 100644 --- a/script/generate-certificates-for-webooks-certificate-spec.rb +++ b/script/generate-certificates-for-webooks-certificate-spec.rb @@ -1,4 +1,12 @@ #Code to generate certificates + +# To generate a self signed CA certificate for use in a server: +# root_ca.add_extension(ef.create_extension("basicConstraints","CA:TRUE",true)) +# root_ca.add_extension(ef.create_extension("keyUsage","keyCertSign, cRLSign", true)) +# root_ca.add_extension(ef.create_extension("subjectKeyIdentifier","hash",false)) +# root_ca.add_extension(ef.create_extension("authorityKeyIdentifier","keyid:always",false)) +# root_ca.add_extension(ef.create_extension("keyUsage","digitalSignature", true)) + require 'openssl' root_key = OpenSSL::PKey::RSA.new 2048 # the CA's public/private key