From: Frank Brehm Date: Mon, 20 Jan 2025 09:59:39 +0000 (+0100) Subject: Adding self signed certs for rocky9 X-Git-Url: https://git.uhu-banane.net/?a=commitdiff_plain;h=c01456214fece458f3779094fa40eb9dd2967425;p=config%2Fns3%2Fetc.git Adding self signed certs for rocky9 --- diff --git a/.etckeeper b/.etckeeper index fd72a77..ff87bf0 100755 --- a/.etckeeper +++ b/.etckeeper @@ -1974,6 +1974,13 @@ maybe chmod 0644 'ssh/ssh_host_rsa_key.pub' maybe chmod 0644 'ssh/sshd_config' maybe chmod 0755 'ssh/sshd_config.d' maybe chmod 0755 'ssl' +maybe chmod 0755 'ssl/CA' +maybe chmod 0755 'ssl/CA/certs' +maybe chmod 0644 'ssl/CA/certs/rocky9.uhu-banane.net.2025-01-20.cert' +maybe chmod 0644 'ssl/CA/certs/rootCA.crt' +maybe chmod 0600 'ssl/CA/private' +maybe chmod 0600 'ssl/CA/private/rocky9.uhu-banane.net.2025-01-20.key' +maybe chmod 0600 'ssl/CA/private/rootCA.key' maybe chmod 0755 'ssl/certs' maybe chmod 0644 'ssl/certs/ca-certificates.crt' maybe chmod 0644 'ssl/certs/ssl-cert-snakeoil.pem' diff --git a/ssl/CA/certs/rocky9.uhu-banane.net.2025-01-20.cert b/ssl/CA/certs/rocky9.uhu-banane.net.2025-01-20.cert new file mode 100644 index 0000000..5bd8860 --- /dev/null +++ b/ssl/CA/certs/rocky9.uhu-banane.net.2025-01-20.cert @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDSTCCAjGgAwIBAgIUDsj1zuSl1+JYyAuhmE6NIGLAn04wDQYJKoZIhvcNAQEL +BQAwIDEeMBwGA1UEAwwVcm9ja3k5LnVodS1iYW5hbmUubmV0MB4XDTI1MDEyMDA5 +NTc1NFoXDTM1MDExODA5NTc1NFowIDEeMBwGA1UEAwwVcm9ja3k5LnVodS1iYW5h +bmUubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFQZLjCfVGPx +Kq9+MpqZPMWpL22kGdmuqeVFf/BXUUQ79sRalO2Flk2qqB0HLGjD4UdPj5vhO1dB +FYCEVTJghs0kPNX4HBbCziIcs4UYXEV9AJjq8bQ5q5oJXykhvVNk7jDZj+QT584m +1QfKdikfFqF+PQ/AJmWdW6+tjJl5WbbqIX/djIRaP8kP3EdoFj2LGp0C3N33gxqr +nPG7+Pf7GXYHBrGADuO1fZsiIJwVUhIi7bmaGRuaklZpuT3Pt1OSGpQMFgDvvr/6 +CNsteMU5a7L/nPd0wrekHPMlV9SZPfytPa1NlPq6neVYWEXZFiOFo63g72Q9ymLi +NobEWAmE2wIDAQABo3sweTAdBgNVHQ4EFgQUTgh3JJHMLdU7r0kPOPCWypAqjxUw +HwYDVR0jBBgwFoAUTgh3JJHMLdU7r0kPOPCWypAqjxUwDwYDVR0TAQH/BAUwAwEB +/zAmBgNVHREEHzAdghVyb2NreTkudWh1LWJhbmFuZS5uZXSHBAoMC3UwDQYJKoZI +hvcNAQELBQADggEBACMDmQUgrJjfm+ZTqgACScK3TapulWmCA/vjgjwIo7T9OsOD +1jzL8q9IzdOt4ZdLreXmTvloWQtobanu11Yrs6NUQ3zl8QWo3oGA8AGgMmKjqGKy +yK0EmW2mbE7F/0EY0sCOKuwZmQuJyIDIXSPCcvOQ3au/e9o7r8IYhzmOW96WYGXA +8T94cwOOVuwCzVzNIMILlK16ePG2k7kBrXZAleW7PsOKCZ//j0vhFNcmyqgj4MRA +h287HYNowAqgWxwVynU5LA8vxDrt4ab2ZvQiJUTdqy6UtlOTo8q58ObUCcggq0UI +yNnhkFzttO9Fa6uCpo0XxDY9CFLP9PcqXLEzbrU= +-----END CERTIFICATE----- diff --git a/ssl/CA/certs/rootCA.crt b/ssl/CA/certs/rootCA.crt new file mode 100644 index 0000000..43b1fbc --- /dev/null +++ b/ssl/CA/certs/rootCA.crt @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDuTCCAqGgAwIBAgIUYGkN3KtA8DRlw2d0HALuaMWIqNEwDQYJKoZIhvcNAQEL +BQAwbDELMAkGA1UEBhMCREUxDzANBgNVBAgMBkJlcmxpbjEPMA0GA1UEBwwGQmVy +bGluMRQwEgYDVQQKDAtGcmFuayBCcmVobTElMCMGCSqGSIb3DQEJARYWZnJhbmtA +YnJlaG0tb25saW5lLmNvbTAeFw0yNTAxMjAwOTUxMjNaFw00NTAxMTUwOTUxMjNa +MGwxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCZXJsaW4xDzANBgNVBAcMBkJlcmxp +bjEUMBIGA1UECgwLRnJhbmsgQnJlaG0xJTAjBgkqhkiG9w0BCQEWFmZyYW5rQGJy +ZWhtLW9ubGluZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv +uLYW1dL5tpuMvu1E9Rr3R2MLSb9Xxzl5q6BEuEyXalDOKTJ2Wqyxsb3Jr3w+cUTx +RNtqbszBN7aXJCNhiHclRLUhXt28hM2myEWsSMHbK8Wk4GG2lWxdtz36x/uPr1Ci +KWXkBFA0QFFT6fcwNGynQD6t7P4gKJLucqjkkRzEWHJrtxGWW6DzqBxSaWoKRtVA +LDtj9BIq46qHQMZ1KbZSWesi/0We4bYZPeHdsdGqQ7zccy0lI9/1uf48wl/yiSlv +LHrrAaMcVHyR4yTLLwR+efsz24Sw+GkKTfl5Agxgip4zp9qGigdL3rY4ZIv7JrW3 +pR5715FP+VBc2u51clJ5AgMBAAGjUzBRMB0GA1UdDgQWBBQH9SaFMN1OVkALnCc2 +b/20pFL0bDAfBgNVHSMEGDAWgBQH9SaFMN1OVkALnCc2b/20pFL0bDAPBgNVHRMB +Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAV4tCzP3Y0mGMtp9svvcGHW0/v +3MMRGQ5Ad0Gyk/1BcZt8stplTJm5SgNweeDbWFfXL1T5RBNdtugz0+8p4eFQvom2 +l73Nsi7KTVMcCFC/is2bh0AHsamNBkmCyFKkxZylt7ntuj6iVTPkCOY1b3lsQ90V +gH2FoMseu8jwCFqgdRVvszeUyn73G2FKhzhRENV2TJceSmvaVdtbd6zO/Pw0Ylxq +S2C4B56nfGTvUAtpxdXZ6hCSb/fNiegE7CtP/DbiMKV/E1MG+u8clTTxt3NSlCze +f6QRoOOxfSFw6upAKFtUl5DFAPMMFnSYa8k1aePb+DMic0RgSQI0y71ZCDCQ +-----END CERTIFICATE----- diff --git a/ssl/CA/private/rocky9.uhu-banane.net.2025-01-20.key b/ssl/CA/private/rocky9.uhu-banane.net.2025-01-20.key new file mode 100644 index 0000000..777d3fc --- /dev/null +++ b/ssl/CA/private/rocky9.uhu-banane.net.2025-01-20.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDEVBkuMJ9UY/Eq +r34ympk8xakvbaQZ2a6p5UV/8FdRRDv2xFqU7YWWTaqoHQcsaMPhR0+Pm+E7V0EV +gIRVMmCGzSQ81fgcFsLOIhyzhRhcRX0AmOrxtDmrmglfKSG9U2TuMNmP5BPnzibV +B8p2KR8WoX49D8AmZZ1br62MmXlZtuohf92MhFo/yQ/cR2gWPYsanQLc3feDGquc +8bv49/sZdgcGsYAO47V9myIgnBVSEiLtuZoZG5qSVmm5Pc+3U5IalAwWAO++v/oI +2y14xTlrsv+c93TCt6Qc8yVX1Jk9/K09rU2U+rqd5VhYRdkWI4WjreDvZD3KYuI2 +hsRYCYTbAgMBAAECggEAK5QLPtB2HVJNzs7DcVIVn4K0ah2pJj/GYFnO0nYzu4ss +0DqHbLVISLOWpNhEplve1ttwUo0kMnrMrIwpU4vqFyHj4EkSWJHIzd6Ohl6NqLWX +6JEI3XvGrUt0txW3MoIXTjOzpxfWP0boIbMoApBgITLZhY5AdYVqp1ZYbHQIlpv6 +ZwK89Icblhl/RZQj/9NhU7YEnZLnv6Yu1VezUOz0VRS6VQKo22rY7lFWREuTRtzi +UOLqcE1uPQzkPZxtl99naBL+48k6l5pKkSiPzpuN9YNTHPmMZ9chBpsUVKPA51zX +2WpZToYfaoX+QUDQg5TEje0vIcAWWE9aPNo50NODaQKBgQD2Sv62eVGVYzmljXFi +dgPR6PEEd1ZHTcfnBbkfxv7hhBOrw3M7TUlbDKEzDVR9QdwxnkFiYV6WL9lP2/Lp +b3j7DYc7ifA4pfW7OIxeMefS/YccIK97iS1wy2YKG7vlRaIkH1pAGeRQG9tVCDfM ++14GzpII+NAVQyX6ZJjP8QX4nwKBgQDMEPsJsvP6ExzqUL8448ut+3+tB7AI/6r2 +FcKIXmLOr22qMeRBqFrV46iaRsHJDH6jKUKOI2fwMPKZP5n/4XNNPGrKDqivnt9K +LJcV9yyU7GXYiL8fr/vDeDHg+OfFSN6bGWS539RNCY4bwI75rCCHNux8azue1WEB +3JX4Smk+RQKBgQDm6jdX0/UGr+pLaoqk+urn8pOOUWjmH2nOExKXVZaAz7k1sGEo +d3TQVc4JNHVDnu0Y5Dx/RbVN8Hy5oAlmjaoLD4r76n78TbVPnFwWsImeyy7S015T +37Bn8Xuw/IG1Gw1C+tY+BUiHRybj2XmfyQlGLoTCvq0xUiyYT5rqUxr7FwKBgEZ6 +Dtk4rr5NX40lOgWB1tRNqbiukQNqmTbIKRlDz8gmGi/Pb0+lv0ljiNVPXpn68LmV +BGFmpPz1SrPWnW8cA+BG33LNQUD2E5PgdoWligYc5sez4p4k/0Rw/HkAPbuLASZ7 +zKfNP9sjU6sOA9MCuXE5bM9DkaG3e/tSnZDU0igpAoGBANCUGN5oFtk1w7I/HWMh +1fHHJgyhqtCDBNgKXiiE5SHUbmeGIUld/LOtE+klnGhn4VQzOlKMEk7Yf5SRRJhG +gE+sV5QfTFJAUBQ4w9YnNSm+olDkoRyscelhIWd2MoY2iHu0D7dVBN7ex/rvSIZp +yRn4T1b/oLWd8CP9wSAJvAdq +-----END PRIVATE KEY----- diff --git a/ssl/CA/private/rootCA.key b/ssl/CA/private/rootCA.key new file mode 100644 index 0000000..fe2e33a --- /dev/null +++ b/ssl/CA/private/rootCA.key @@ -0,0 +1,30 @@ +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIBbjZ2xGjK3sCAggA +MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECF5Zy0kcn0rLBIIEyDKf8pTZkfXQ +QIYWVIaoIl43uTTSo9chnsJcxU50Dotlag9q8HWWwSR4n2vdwA5+UatxXR3xVyox +b7aipb6mH0/2pjUqyY8g5h4rAv44TqP4dCx+gkbx8DtrUJFj16/bUJkULIG1cF4X +NoataK41d+StJnNMy2JZv+sfvWrbBHDBxA4HjxQpy5mSOAnB16n/uvaR96ysN8s0 +0zz97mYATYOsIJetflc5vX39VP4NdLRWaiS9ZcMnk1V4rxT8/5WETn+eXcATrmO4 +PvQGbxLJRSp8FtTA3G+JM9sPyRP0bGyA3WRNblEZJXCiNA/0dkJyrK+oaiCEadCt +wY8UmwhzSAXk0AYfHHmYVkmpUJteD8F/mqNZH9wbnW0F1l8pORhr9nidbYuo1SM9 +HnaRnJ5tA4+9zyfaTAXsqqwVItjsiulJOPdBfejNeylZqZDq65F1GU1VzLuwZdTt +P85AMCk/S5mZL6Gi1OjrJYpjGM03mPeRXRQQcuoDNukyo4Sd5SD+QPTTGkpq4UDQ +lcTW5G3EZg6OW/EPNngtYx/avAMeuG0r4DkkxxnwT9dL+o7TIvnU00EbRDtXibQ6 +5XycClxQOPJnBNf4scChPlwFIGCBkw4tDGKhvRBSG1US4hhWPdmgs/LwmXGJj7rn +1Mt0Xlr4rBR+Hpb9ET8GUO/IdsS0g9rnaFvvngeragcZm13rHMMIWx0/Sra8KflA +3IqFbH5rZNsInjgsI2w7dEb5doS86BD7B5VjDJiKnj1PSBRKR+sqBMufcuqgvDmu +QJrJ+C9BexrKxyjXr9V+UH/SeLrQcANGj3Th0OsswQH20mqUCEEg2R7WUDRiix+B +Od2DOyeX2AX9QGTjT7ZRbHB8vJIYEfUrt6yxpWcljiPaIc0wpV59hMykNHG/fqlm +NPgHV7tnd4nM/0r5GReXbtXoetcDjXlJhI1Kr/FASI3vXPtsT5903FyXYiR6yL8q +Q9WA0eMSO4qn72ypcRA/xc82nuJNu2PCtnw/tbtGjfHx2c8uEJYp4g5uSRp3iG03 +jpbSiI17AAK70sbG7KyrP4keiGK1jieP7eeDztLwj1y6hG/cErh8UYaqkToDoKmJ +kiZaD//SknsDCIuVpfLLMdwpcKvewxUTT9gxYDm97p7bHxZqRcqrY2UA7Uvl4+5I +YIwJiU5nlWokVRxno0p2N5wmjuGKeAeyrAPzk8pYqQV5OSiBSzY6qmlk0chg6x5t +poo4WMzxUI1mu3W8GptMX4wrN9w/hLLH0atiPFp8PNHTg3fRRN6Ti42MehBYEW47 +FMg4OvxnQ5+XqQ47gEfuwB/13+4xrCT2OoXIkrbPX+MOqtD/6gK9bnm5wutipE8A +ZqZYNvjhEAwncuzuFWCmFknCYE8945ZeHqhAnOeuAEbs6b8ruqkBrwC2Fyzvdutl +3dCkOdmPoQwn+F8jU/6jrn9IZAyGLfWOEuEPA5owfUeDmPJrGAVvJDZ63B1YhBm2 +FpBZFaxMgKScpb4zq5SORZmXphLJXUVOuZsXLI8JlFGAPw5jM+7EUcgqapIy9ddm +JRCtJ7cq1WPpo6mY0iyoQmp3b+hVrc0Ssytbgz+Gp/UxsoEvUL/Mbp90O+lXVuum +I2ARZl/W9+wuKtDL5aAwXg== +-----END ENCRYPTED PRIVATE KEY-----