fluvio-future 0.8.3

I/O futures for Fluvio project
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162

# -legacy is an openssl3 option for pkcs12 formats whose default
# has shifted
PFX_OPTS ?= "-legacy"

clean:
	rm -rf test-certs

setup:
	mkdir -p test-certs
	openssl version

generate-certs:	setup generate-ca-crt generate-intermediate-ca-crt generate-server-crt generate-intermediate-chain generate-client-crt generate-pk12-certs

# run generate-certs first
generate-pk12-certs:	generate-server-pk12 generate-client-pk12

### CA Generation

generate-ca-key:
	openssl genrsa  -out test-certs/ca.key 4096

generate-ca-crt:	generate-ca-key
	openssl req -x509 -new -nodes -key test-certs/ca.key -out test-certs/ca.crt \
		-subj /C=US/ST=CA/L=Sunnyvale/O=Fluvio/OU=Eng/CN=fluvio.io

### Intermediate CA Generation

generate-intermediate-ca-key:
	openssl genrsa  -out test-certs/intermediate-ca.key 4096

generate-intermediate-ca-csr: generate-intermediate-ca-key
	openssl req -new \
    -key test-certs/intermediate-ca.key \
    -out test-certs/intermediate-ca.csr \
    -subj /C=US/ST=CA/L=Sunnyvale/O=Fluvio/OU=Eng/CN=intermediate.fluvio.io \
    -config intermediate-cert.conf

generate-intermediate-ca-crt: generate-intermediate-ca-csr
	openssl x509 -req \
    -in test-certs/intermediate-ca.csr \
    -out test-certs/intermediate-ca.crt \
		-CA test-certs/ca.crt \
		-CAkey test-certs/ca.key \
		-CAcreateserial  \
		-days 500 \
		-extensions v3_inter \
		-extfile openssl.cnf

### Non-Intermediate Chain Server

generate-server-key:
	openssl genrsa -out test-certs/server.key 4096
	cp test-certs/server.key test-certs/server-hs.key

generate-server-csr:	generate-server-key
	openssl req -new -key test-certs/server.key \
		-out test-certs/server.csr \
		-config  cert.conf


### Intermediate Chain Server

generate-intermediate-server-key:
	openssl genrsa -out test-certs/intermediate-server.key 4096


generate-intermediate-server-csr:	generate-intermediate-server-key
	openssl req -new -key test-certs/intermediate-server.key \
		-out test-certs/intermediate-server.csr \
		-config  cert.conf

# generate anonymous pk12
.PHONY: generate-server-pk12
generate-server-pk12:
	openssl pkcs12 -export -out test-certs/server.pfx ${PFX_OPTS} -inkey test-certs/server.key -in test-certs/server.crt -certfile  test-certs/ca.crt -passout pass:test



verify-csr:
	openssl req -in test-certs/server.csr -noout -text

### Non-Intermediate Chain

decrypt-server-crt:
	openssl x509 -in test-certs/server.crt   -noout -text

generate-server-crt:	generate-server-csr
	openssl x509 -req \
		-in test-certs/server.csr \
		-out test-certs/server.crt \
		-CA test-certs/ca.crt \
		-CAkey test-certs/ca.key \
		-CAcreateserial  \
		-days 500 \
		-extensions v3_end \
		-extfile openssl.cnf

### Intermediate Chain

decrypt-intermediate-server-crt:
	openssl x509 -in test-certs/intermediate-server.crt   -noout -text

generate-intermediate-server-crt:	generate-intermediate-server-csr
	openssl x509 -req \
		-in test-certs/intermediate-server.csr \
		-out test-certs/intermediate-server.crt \
		-CA test-certs/intermediate-ca.crt \
		-CAkey test-certs/intermediate-ca.key \
		-CAcreateserial  \
		-days 500 \
		-extensions v3_end \
		-extfile openssl.cnf

generate-intermediate-chain: generate-intermediate-ca-crt generate-intermediate-server-crt
	cat test-certs/ca.crt test-certs/intermediate-ca.crt test-certs/intermediate-server.crt > test-certs/intermediate-full.crt

#################################
#
#  Client Certificates
#

generate-client-key:
	openssl genrsa -out test-certs/client.key 4096

generate-client-csr:	generate-client-key
	openssl req -new -key test-certs/client.key -out test-certs/client.csr \
		-subj "/C=US/ST=CA/O=MyOrg, Inc./CN=client.com"

generate-client-crt:	generate-client-csr
	openssl x509 -req \
		-days 365 -in test-certs/client.csr \
		-out test-certs/client.crt \
		-CA test-certs/ca.crt -CAkey test-certs/ca.key -CAcreateserial \
		-extensions v3_end \
		-extfile openssl.cnf

generate-client-pk12:
	openssl pkcs12 -export -out test-certs/client.pfx ${PFX_OPTS} -inkey test-certs/client.key -in test-certs/client.crt -certfile  test-certs/ca.crt -passout pass:test


# for non mac
test-curl:
	curl -v -s -k --key client.key --cert client.crt "https://127.0.0.1:8443/hello/world"

install-curl-ssl:
	 brew upgrade curl-openssl

test-mac-curl:
	 /usr/local/opt/curl-openssl/bin/curl -v -k -s --key certs/client.key --cert certs/client.crt "https://127.0.0.1:8443/hello/world"


MAKE_DIR = $(dir $(realpath $(firstword $(MAKEFILE_LIST))))

start-nginx:
	nginx -c $(MAKE_DIR)/nginx.conf

start-intermediate-nginx:
	nginx -c $(MAKE_DIR)/intermediate-nginx.conf

stop-nginx:
	nginx -s quit