blob: 8439c9e6afa7ca7f966139a19cbcc166f1e71e92 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
"""
Generate SSL test certificates.
"""
import subprocess
import shlex
import os
import shutil
ROOT_CA = "trusted-root"
SUBJECT = "/CN=example.mitmproxy.org/"
def do(args):
print("> %s" % args)
args = shlex.split(args)
output = subprocess.check_output(args)
return output
def genrsa(cert):
do("openssl genrsa -out {cert}.key 2048".format(cert=cert))
def sign(cert):
do("openssl x509 -req -in {cert}.csr "
"-CA {root_ca}.crt "
"-CAkey {root_ca}.key "
"-CAcreateserial "
"-days 7300 "
"-out {cert}.crt".format(root_ca=ROOT_CA, cert=cert)
)
def mkcert(cert, args):
genrsa(cert)
do("openssl req -new -nodes -batch "
"-key {cert}.key "
"{args} "
"-out {cert}.csr".format(cert=cert, args=args)
)
sign(cert)
os.remove("{cert}.csr".format(cert=cert))
# create trusted root CA
genrsa("trusted-root")
do("openssl req -x509 -new -nodes -batch "
"-key trusted-root.key "
"-days 7300 "
"-out trusted-root.crt"
)
h = do("openssl x509 -hash -noout -in trusted-root.crt").decode("ascii").strip()
shutil.copyfile("trusted-root.crt", "{}.0".format(h))
# create trusted leaf cert.
mkcert("trusted-leaf", "-subj {}".format(SUBJECT))
# create self-signed cert
genrsa("self-signed")
do("openssl req -x509 -new -nodes -batch "
"-key self-signed.key "
"-subj {} "
"-days 7300 "
"-out self-signed.crt".format(SUBJECT)
)
|
