mtls

README

Run all the command in bash

Generating our rootCA file

• openssl req -newkey rsa:2048 -nodes -x509 -days 365 -out ca.crt -keyout ca.key -subj "/C=BD/ST=Dhaka/L=Dhaka/O=AppsCode, Inc./CN=AppsCode Root CA"

Generating server certificates

• openssl genrsa -out server.key 2048
• openssl req -new -key server.key -out server.csr -subj "/C=BD/ST=Dhaka/L=Dhaka/O=AppsCode, Inc./CN=localhost"
• openssl x509 -req -extfile <(printf "subjectAltName=DNS:localhost,DNS:localhost") -days 365 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt

Generating the client certificate

• openssl genrsa -out client.key 2048
• openssl req -new -key client.key -out client.csr -subj "/C=FR/ST=Paris/L=Paris/O=Orange, Inc./CN=localhost"
• openssl x509 -req -extfile <(printf "subjectAltName=DNS:localhost,DNS:localhost") -in client.csr -CA ca.crt -CAkey ca.key -out client.crt -days 365 -sha256 -CAcreateserial

Resource

• https://kofo.dev/how-to-mtls-in-golang
• https://youtu.be/yzz3bcnWf7M