certificate Command
The certificate command is used to create a new TLS certificate and key pair based on the internal root CA certificate. This can be used to create a self-signed certificate for additional components that communicate with Resoto.
Usage
certificate create --common-name <name> [--dns-names <dns_names>] [--ip-addresses <ip_addresses>] [--days-valid <days>]
Options
| Option | Description | Required? |
|---|---|---|
--common-name <name> | Server name to protect with the certificate | ✔️ |
--dns-names <dns_names> | Space-delimited DNS names the certificate should be valid for | ❌ |
--ip-addresses <ip_addresses> | Space-delimited IP addresses the certificate should be valid for | ❌ |
--days-valid <days> | Number of days the certificate should be valid (365 days by default) | ❌ |
Examples
Chunking with size of 2
> certificate create --common-name example.com --dns-names example.com *.example.com --days-valid 365
Received a file example.com.key, which is stored to ./example.com.key.
Received a file example.com.crt, which is stored to ./example.com.crt.
