Files
mongo/x509/static/README.md
Gabriel Marks 77d90a66d3 SERVER-99750 Use generated certificates in jstests (#46650)
GitOrigin-RevId: 303ffa3be9ec56f70a9ff9e38d4430fd0c927599
2026-01-28 18:44:45 +00:00

5.6 KiB

CAs, certificates, digests, keys, etc. which are not generated by mkcert.py are stored here. Contains all of the keys needed by mkcert.py during certificate generation with the main and apple certs.

Filename Generation Command
ca_key.pem openssl genrsa -out x509/static/ca_key.pem 2048
ec_ca_key.pem openssl ecparam -name prime256v1 -genkey -out x509/static/ec_ca_key.pem
ec_key.pem openssl ecparam -name prime256v1 -genkey -out x509/static/ec_key.pem
ec_ocsp_ca_key.pem openssl ecparam -name prime256v1 -genkey -out x509/static/ec_ocsp_ca_key.pem
ec_ocsp_key.pem openssl ecparam -name prime256v1 -genkey -out x509/static/ec_ocsp_key.pem
intermediate_b_ca_key.pem openssl genrsa -out x509/static/intermediate_b_ca_key.pem 2048
intermediate_b_key.pem openssl genrsa -out x509/static/intermediate_b_key.pem 2048
intermediate_ca_key.pem openssl genrsa -out x509/static/intermediate_ca_key.pem 2048
intermediate_key.pem openssl genrsa -out x509/static/intermediate_key.pem 2048
intermediate_ocsp_ca_key.pem openssl genrsa -out x509/static/intermediate_ocsp_ca_key.pem 2048
intermediate_ocsp_key.pem openssl genrsa -out x509/static/intermediate_ocsp_key.pem 2048
key.pem openssl genrsa -out x509/static/key.pem 2048
macos_ca_key.pem openssl genrsa -out x509/static/macos_ca_key.pem 2048
macos_key.pem openssl genrsa -out x509/static/macos_key.pem 2048
ocsp_ca_key.pem openssl genrsa -out x509/static/ocsp_ca_key.pem 2048
ocsp_key.pem openssl genrsa -out x509/static/ocsp_key.pem 2048
ocsp_responder_key.pem openssl genrsa -out x509/static/ocsp_responder_key.pem 2048
pkcs1_encrypted_key.pem openssl rsa -in x509/static/key.pem -passin pass:qwerty -out x509/static/pkcs1_encrypted_key.pem -aes256 -passout pass:qwerty
pkcs1_encrypted_trusted_key.pem openssl rsa -in x509/static/trusted_key.pem -passin pass:qwerty -out x509/static/pkcs1_encrypted_trusted_key.pem -aes256 -passout pass:qwerty
pkcs8_encrypted_ec_key.pem openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_key.pem -out x509/static/pkcs8_encrypted_ec_key.pem
pkcs8_encrypted_ec_ocsp_ca_key.pem openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_ocsp_ca_key.pem -out x509/static/pkcs8_encrypted_ec_ocsp_ca_key.pem
pkcs8_encrypted_ec_ocsp_key.pem openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_ocsp_key.pem -out x509/static/pkcs8_encrypted_ec_ocsp_key.pem
pkcs8_encrypted_ec_ocsp_responder_key.pem openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_ocsp_key.pem -out x509/static/pkcs8_encrypted_ec_ocsp_responder_key.pem
rollover_ca_key.pem openssl genrsa -out x509/static/rollover_ca_key.pem 2048
rollover_key.pem openssl genrsa -out x509/static/rollover_key.pem 2048
trusted_ca_key.pem openssl genrsa -out x509/static/trusted_ca_key.pem 2048
trusted_key.pem openssl genrsa -out x509/static/trusted_key.pem 2048