messa08ec.ec.local

.gitignore

@@ -0,0 +1,4 @@
+conf/includes/localhost.crt
+conf/includes/localhost.key
+conf/includes/ec-server.key
+conf/includes/ec-server.crt

conf/includes/localhost.conf

@@ -17,7 +17,7 @@ organizationName_default    = Infineon Technologies Americas Corp.
 organizationalUnitName      = organizationalunit
 organizationalUnitName_default = Development
 commonName                  = Common Name (e.g. server FQDN or YOUR name)
-commonName_default          = ISCN5CG1325C0X.infineon.com
+commonName_default          = example.com
 commonName_max              = 64
 
 [req_ext]
@@ -27,19 +27,15 @@ subjectAltName = @alt_names
 subjectAltName = @alt_names
 
 [alt_names]
-DNS.1   = ISCN5CG1325C0X.infineon.com
-DNS.2   = ISCN5CG1325C0X
-DNS.3   = localhost
-DNS.4   = 127.0.0.1
+DNS.1   = example.com
+DNS.2   = localhost
+DNS.3   = 127.0.0.1
 
 # https://webscoot.io/blog/create-self-signed-certificate-ubuntu-windows-nginx/
-# cd "C:\Program Files\DevOps\Mesa_FI\usr\bin"
+# cd "C:\Program Files\Git\usr\bin"
 # openssl
-# req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.key -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.crt -config L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.conf
+# req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\Git\NGINX-Conf\conf\includes\localhost.key -out L:\Git\NGINX-Conf\conf\includes\localhost.crt -config L:\Git\NGINX-Conf\conf\includes\localhost.conf
 # openssl
-# req -newkey rsa:2048 -keyout L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.key -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\certificate-signing-request.csr -config L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\localhost.conf
-# https://intranet.infineon.com/
+# pkcs12 -in L:\git\NGINX-Conf\conf\includes\ec-server.pfx -nocerts -out L:\Git\NGINX-Conf\conf\includes\ec-server.key
 # openssl
-# pkcs12 -in L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.pfx -nocerts -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.key
-# openssl
-# pkcs12 -in L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.pfx -clcerts -nokeys -out L:\DevOps\Mesa_FI\NGINX-Conf\conf\includes\ec-server.crt
+# pkcs12 -in L:\git\NGINX-Conf\conf\includes\ec-server.pfx -clcerts -nokeys -out L:\Git\NGINX-Conf\conf\includes\ec-server.crt

conf/includes/localhost.crt

@@ -1,24 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIEEjCCAvqgAwIBAgIUJrbp6n/LNC7f7S4AsbzDP9T+MVkwDQYJKoZIhvcNAQEL
-BQAwgZkxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdBcml6b25hMQ0wCwYDVQQHDARN
-ZXNhMS0wKwYDVQQKDCRJbmZpbmVvbiBUZWNobm9sb2dpZXMgQW1lcmljYXMgQ29y
-cC4xFDASBgNVBAsMC0RldmVsb3BtZW50MSQwIgYDVQQDDBtJU0NONUNHMTMyNUMw
-WC5pbmZpbmVvbi5jb20wHhcNMjMwNTEyMTUyNjUzWhcNMjQwNTExMTUyNjUzWjCB
-mTELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0FyaXpvbmExDTALBgNVBAcMBE1lc2Ex
-LTArBgNVBAoMJEluZmluZW9uIFRlY2hub2xvZ2llcyBBbWVyaWNhcyBDb3JwLjEU
-MBIGA1UECwwLRGV2ZWxvcG1lbnQxJDAiBgNVBAMMG0lTQ041Q0cxMzI1QzBYLmlu
-ZmluZW9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKLqZFx1
-XYv6ea30TVM4107RHckfjUVioNAqf7S2y4RkSWAXrWC5JimrOnbgDpDpHQlWDaP8
-heQlNi/kcVIe6IFj0jy7aRo5XhJn6VZJqfh6RK5bw7DkeS/1jxDAPy+x6XKbFIWA
-amZBF+zdrkm4YxYEBRuIc4hLy17sGPNxjCcCNz0jylh6S/9Qv2EkuEly46vwpXuJ
-5S2n7M1ka7IV8d+iGQaMdZcOqp7NJuXuyCbs2MBUGVjyCR5m5zQ2di/V7+JHdu/w
-PZ27RbFhYHtmiKJQc+fzOsfhvs2UfNoYr6AShppsRTgMq4SNn1dxh6znXudA6bOY
-GVr63OAybFb0F8MCAwEAAaNQME4wTAYDVR0RBEUwQ4IbSVNDTjVDRzEzMjVDMFgu
-aW5maW5lb24uY29tgg5JU0NONUNHMTMyNUMwWIIJbG9jYWxob3N0ggkxMjcuMC4w
-LjEwDQYJKoZIhvcNAQELBQADggEBAFxGmOOldrAAwpRgl73WicIgygKqTMk79ale
-kwlsz704X2YCNe3eBL8iqXSIBpiwI3bnbqwOk0rsM9ftzQ3OBfGXk6qWqAaFmqlk
-oDQcT8l44eb7oOAvwfswpkxmJKCuriv/qjVuJizXBX8a+K4sYPe7DBPyW89TBxbg
-UFXLp/iUaBmf74ebZPs0jnFBZMeYmJ4W9F7xYwNcJSegMakeQ+B23vcaF0XNklYP
-iNss9S1HRDB0cGYMvZRWlbSpPv5ZAvddo3w6lYMwd2N9ZByFBwEm56rp53hMFPWa
-qPXLnkyqrcBLv5h/agWcpuRLLECSmxIrvHoUxWXHrs7ZBGvc8B4=
------END CERTIFICATE-----

conf/includes/localhost.key

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCi6mRcdV2L+nmt
-9E1TONdO0R3JH41FYqDQKn+0tsuEZElgF61guSYpqzp24A6Q6R0JVg2j/IXkJTYv
-5HFSHuiBY9I8u2kaOV4SZ+lWSan4ekSuW8Ow5Hkv9Y8QwD8vselymxSFgGpmQRfs
-3a5JuGMWBAUbiHOIS8te7BjzcYwnAjc9I8pYekv/UL9hJLhJcuOr8KV7ieUtp+zN
-ZGuyFfHfohkGjHWXDqqezSbl7sgm7NjAVBlY8gkeZuc0NnYv1e/iR3bv8D2du0Wx
-YWB7ZoiiUHPn8zrH4b7NlHzaGK+gEoaabEU4DKuEjZ9XcYes517nQOmzmBla+tzg
-MmxW9BfDAgMBAAECggEAVWJbb0nj2XVRSKZ90Fw+HATlg3+R3weuGOvtOp2DVMPq
-4P4H1GW1ZqljXuJXQAOtQDNlusiis8v89mTYL54bZZUXntTqZOAkOalUVfENsDkE
-vg1CJvfXvBcLAFCBzVGFdJdqzf1bxnPfQjl9Gw4UgHli4+dEBe8Ti5BaE10zg02D
-1WPSy7+CbUDtqEWPW1MOfcrgUWtJw0+GjZCH2FaFbeb2CozOPNTJroRdKblFhFnY
-yLxgcULURc3ySk0iHUndSvA3ZK5YXRxlx/Fa0J8DVg8vTwfPAM0famZsWth1xJWR
-zt7/5eNHiyWudKZyvQnkqGYMgSxJGY7QSr2rfbpeYQKBgQDSOxrbXfQvGIIzOoxg
-N7T1aBdJSWsAdZGZ8pEgJO3QkwQ2pUyfeYEoLQoPPyyUSvrlqOhia+pmvgd3qoyh
-WrD/CniD3/7yV/IY1G9PMZcPKOhrncvva6Dn5DMiKdzFUGGWp23Ux1zQKwf8svU3
-r/wPRsXaERVf/k2hlf+BQB3C3QKBgQDGYj4O2fORdnplFmIHRVRSP/aXKagoBDBd
-qyl4+quXDjdcCJDUwv1Y67W1fjmqvUXVYQTpiQtKL7PGSlDtaOzQfY4AHQwO0R+z
-C+/AXMmSa1iMq6Wf53JqhFT9yH7PWl51RHcow6lJlAjq66QtJBaObLxfoKgISrNM
-sFJp20ILHwKBgCtuQG8fKsnr80HoD4X1HDIyjdT7ENroburx3J9aYbLcHFu5rGmp
-rVACdfiOYYRFNS3qxg9HIgaVrW9AUYsn9DbMD/eWd9HS71XH1TL0GLPuDI3m7HGK
-t5QQZaviIBS3NWHtNthlUzxCF4VR5yzY82aohUk2jEbnf1wpY75s43kVAoGAOyVB
-IUZjssOi/A5vTYGjAR6m0yyNQNj23oZQSAxcKh4H7T10iKpVxDQKKcEnSjtB3bse
-Ls43+nc8Xur7M7zrlcFJG8mNNcGtdMEjSrOfOTMd5Fqsd38WgqFPgZZMEF/993Jh
-IFstVo13FysH+JlgzDeo9c29KzOyPzP2bi77grsCgYEAw4dkkQiPVs0s+u0TnT6r
-2t+d9lOS3iKqoaD9Wd1KdLxV6e5sHLMdj76Q+p5G8xOpQF1WfXR5wvWTkL7xFPgY
-xMyiJ72AIlvrmeinfwfUdFILSu6rrO0Fo3sB23+vXxEv3+6MnC3QneZooIGnKYqL
-WpiDFEw2WBvluU+neub84gg=
------END PRIVATE KEY-----

conf/nginx.conf

@@ -12,12 +12,12 @@ http {
         listen 443 ssl http2;
         listen [::]:443 ssl http2;
         server_name localhost;
-        ssl_certificate "includes/localhost.crt";
-        ssl_certificate_key "includes/localhost.key";
+        # ssl_certificate "includes/localhost.crt";
+        # ssl_certificate_key "includes/localhost.key";
         # ssl_certificate "includes/ec-server.cer";
-        # ssl_certificate "includes/ec-server.crt";
-        # ssl_certificate_key "includes/ec-server.key";
-        # ssl_password_file "includes/ec-server.pass";
+        ssl_certificate "includes/ec-server.crt";
+        ssl_certificate_key "includes/ec-server.key";
+        ssl_password_file "includes/ec-server.pass";
         ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
         # include "includes/html.conf";
         include "includes/BaGet.conf";