mirror of
https://github.com/pgbackrest/pgbackrest.git
synced 2024-12-14 10:13:05 +02:00
1bd5530a59
Double spaces have fallen out of favor in recent years because they no longer contribute to readability. We have been using single spaces and editing related paragraphs for some time, but now it seems best to update the remaining instances to avoid churn in unrelated commits and to make it clearer what spacing contributors should use.
58 lines
2.6 KiB
Markdown
58 lines
2.6 KiB
Markdown
# pgBackRest Test Certificates
|
|
|
|
The certificates in this directory are used for testing purposes only and are not used for actual services. They are used only by the unit and integration tests and there should be no reason to modify them unless new tests are required.
|
|
|
|
## Generating the Test CA (pgbackrest-test-ca.crt/key)
|
|
|
|
This is a self-signed CA that is used to sign all server certificates. No intermediate CAs will be generated since they are not needed for testing.
|
|
|
|
```
|
|
cd [pgbackrest-root]/test/certificate
|
|
openssl genrsa -out pgbackrest-test-ca.key 4096
|
|
openssl req -new -x509 -extensions v3_ca -key pgbackrest-test-ca.key -out pgbackrest-test-ca.crt -days 99999 \
|
|
-subj "/C=US/ST=All/L=All/O=pgBackRest/CN=test.pgbackrest.org"
|
|
openssl x509 -in pgbackrest-test-ca.crt -text -noout
|
|
```
|
|
|
|
## Generating the Server Test Key (pgbackrest-test-server.key)
|
|
|
|
This key will be used for all server certificates to keep things simple.
|
|
|
|
```
|
|
cd [pgbackrest-root]/test/certificate
|
|
openssl genrsa -out pgbackrest-test-server.key 4096
|
|
```
|
|
|
|
## Generating the Server Test Certificate (pgbackrest-test-server.crt/key)
|
|
|
|
This certificate will be used in unit and integration tests. It is expected to pass verification but won't be subjected to extensive testing.
|
|
|
|
```
|
|
cd [pgbackrest-root]/test/certificate
|
|
openssl req -new -sha256 -nodes -out pgbackrest-test-server.csr -key pgbackrest-test-server.key -config pgbackrest-test-server.cnf
|
|
openssl x509 -req -in pgbackrest-test-server.csr -CA pgbackrest-test-ca.crt -CAkey pgbackrest-test-ca.key -CAcreateserial \
|
|
-out pgbackrest-test-server.crt -days 99999 -extensions v3_req -extfile pgbackrest-test-server.cnf
|
|
openssl x509 -in pgbackrest-test-server.crt -text -noout
|
|
```
|
|
|
|
## Generating the Client Test Key (pgbackrest-test-client.key)
|
|
|
|
This key will be used for all client certificates to keep things simple.
|
|
|
|
```
|
|
cd [pgbackrest-root]/test/certificate
|
|
openssl genrsa -out pgbackrest-test-client.key 4096
|
|
```
|
|
|
|
## Generating the Client Test Certificate (pgbackrest-test-client.crt/key)
|
|
|
|
This certificate will be used in unit and integration tests. It is expected to pass verification but won't be subjected to extensive testing.
|
|
|
|
```
|
|
cd [pgbackrest-root]/test/certificate
|
|
openssl req -new -sha256 -nodes -out pgbackrest-test-client.csr -key pgbackrest-test-client.key -config pgbackrest-test-client.cnf
|
|
openssl x509 -req -in pgbackrest-test-client.csr -CA pgbackrest-test-ca.crt -CAkey pgbackrest-test-ca.key -CAcreateserial \
|
|
-out pgbackrest-test-client.crt -days 99999 -extensions v3_req -extfile pgbackrest-test-client.cnf
|
|
openssl x509 -in pgbackrest-test-client.crt -text -noout
|
|
```
|