Generate a self-signed x509v3 certificate for use with multiple URLs / IPs.
CRT_CN="client.com" CRT_SAN="DNS.1:www.client.com,DNS.2:admin.client.com,IP.1:192.168.1.10,IP.2:10.0.0.234" gencert.sh
You may change the
CRT_SAN values of the above command based on your needs.
Additionally you may use any of the following environment variables :
CRT_C: Country value
CRT_L: Locality value
CRT_O: Organization value
CRT_OU: Organizational Unit value
CRT_CN: Common Name value
CRT_SAN: SubjectAltName value
The generated private key is passwordless by default.
You can secure/unsecure the certificates using standard
# secure openssl pkcs8 -in mattermost-x509.key -topk8 -v2 des3 -out mattermost-x509.secure.key # unsecure openssl pkcs8 -in mattermost-x509.secure.key -topk8 -nocrypt -out mattermost-x509.key
Below are additional guides and documentation for optional reading: