# How to generate certificates

self-signed certificate in `assets/_common/ssl` and `assets/_common/consul/ssl` for integration-tests

## Key generation 

Create self-signed certificate for 10 years:

```sh
cd assets/_common/ssl/
openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:2048 -config openssl.cfg -keyout server.key -out server.crt
cd consul
openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:2048 -config openssl.cfg -keyout server.key -out server.crt
```

## Certificate validity verification

```sh
openssl x509 -in server.crt -noout -text
```

check validity fields

beware of CN
