https://github.com/matbme/mqtt-mtls
No
https://github.com/matbme/mqtt-mtls
Last synced: 11 months ago
JSON representation
No
- Host: GitHub
- URL: https://github.com/matbme/mqtt-mtls
- Owner: matbme
- Created: 2023-06-06T23:23:55.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2023-06-13T22:56:57.000Z (over 2 years ago)
- Last Synced: 2025-01-12T23:49:07.799Z (about 1 year ago)
- Language: Python
- Size: 10.7 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
Certificado de CA, Autoridade Certificadora (preencher as informações, se deixar em branco não gera os arquivos):
```bash
openssl req -new -x509 -days 365 -extensions v3_ca -keyout ca.key -out ca.crt
```
Para rodar o comando acima sem o erro `error Loading extension section v3_ca`, foi necessário no arquivo `/etc/ssl/openssl.cnf`, adicionar:
```
[ v3_ca ]
basicConstraints = critical,CA:TRUE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
```
Gerar certificado de cliente assinado pela CA (preencher as informações, se deixar em branco não gera os arquivos):
```bash
openssl req -new -nodes -out client.csr -keyout client.key
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 365
```