better key generation flow

2026-09-02 14:20:49 +05:30
parent 28132dfd66
commit 802fd78a9c
4 changed files with 22 additions and 9 deletions
@@ -0,0 +1,16 @@
+.PHONY: setup-tls
+
+DOMAIN ::= website.com
+
+setup-tls: tls/cert.pem
+
+tls/cert.pem: tls/key.pem
+	openssl req -x509 -new -key $< -out $@ -noenc -days 365 \
+		-addext 'subjectAltName=DNS:sub.a.$(DOMAIN),DNS:a.$(DOMAIN),DNS:b.$(DOMAIN)' \
+		-subj '/CN=$(DOMAIN)'
+
+tls/key.pem: tls/
+	openssl genpkey -out $@ -algorithm RSA -pkeyopt bits:4096
+
+tls/:
+	mkdir $@