mirror of
https://github.com/Syngnat/GoNavi.git
synced 2026-06-05 05:59:43 +08:00
de8fb60a30
- 引入 third_party/highgo-pq 作为 HighGo 专用驱动实现 - 调整驱动注册与连接入口，避免覆盖 postgres 驱动 - 保持 PG 数据源行为不变并补充接入文档
38 lines
1.1 KiB
Makefile
38 lines
1.1 KiB
Makefile
.PHONY: all root-ssl server-ssl client-ssl
|
|
|
|
# Rebuilds self-signed root/server/client certs/keys in a consistent way
|
|
all: root-ssl server-ssl client-ssl
|
|
rm -f .srl
|
|
|
|
root-ssl:
|
|
openssl req -new -sha256 -nodes -newkey rsa:2048 \
|
|
-config ./certs/root.cnf \
|
|
-keyout /tmp/root.key \
|
|
-out /tmp/root.csr
|
|
openssl x509 -req -days 3653 -sha256 \
|
|
-in /tmp/root.csr \
|
|
-extfile /etc/ssl/openssl.cnf -extensions v3_ca \
|
|
-signkey /tmp/root.key \
|
|
-out ./certs/root.crt
|
|
|
|
server-ssl:
|
|
openssl req -new -sha256 -nodes -newkey rsa:2048 \
|
|
-config ./certs/server.cnf \
|
|
-keyout ./certs/server.key \
|
|
-out /tmp/server.csr
|
|
openssl x509 -req -days 3653 -sha256 \
|
|
-extfile ./certs/server.cnf -extensions req_ext \
|
|
-CA ./certs/root.crt -CAkey /tmp/root.key -CAcreateserial \
|
|
-in /tmp/server.csr \
|
|
-out ./certs/server.crt
|
|
|
|
client-ssl:
|
|
openssl req -new -sha256 -nodes -newkey rsa:2048 \
|
|
-config ./certs/postgresql.cnf \
|
|
-keyout ./certs/postgresql.key \
|
|
-out /tmp/postgresql.csr
|
|
openssl x509 -req -days 3653 -sha256 \
|
|
-CA ./certs/root.crt -CAkey /tmp/root.key -CAcreateserial \
|
|
-in /tmp/postgresql.csr \
|
|
-out ./certs/postgresql.crt
|