xbusd cert generate server-ca - Generate certificates for the server CA.¶
Synopsis¶
Generate certificates for the server CA (the one clients connecting to Xbus will check). The file will be named “ServerCA.crt” and is based on a “ServerCA.key” private key.
xbusd cert generate server-ca [flags]
Options¶
-
--expire¶ A date (YYYY-MM-DD) or duration (in y, m or d) for expiration
-
--help¶ help for server-ca
-
--host-defs¶ A comma separated list of hostname and ip addresses that may be used to contact the server. Example: “xbus.mycompany.org,10.0.0.122,128.0.0.1”
Options inherited from parent commands¶
-
--cert-dir¶ The directory where certificates and private keys of use to this program reside.
-
--config¶ config file (default is the first existing file in: $HOME/.config/xbus/xbusd.yaml, /etc/xbus/xbusd.yaml)
-
--database-dsn¶ PostgreSQL database connection string (ex: “sslmode=disable dbname=xbus”)
-
--database-max-connections¶ Maximum allowed number of open database connections
-
--debug¶ Enable debugging mode, with lots of logging to the console
-
--full-version¶ Show version and commit hash
-
--nats-host¶ Host of the nats server
-
--nats-port¶ Port of the nats server
-
--storage-process-db-max-connections¶ Maximum number of db connections for the process storage (defaults to 30% of database.max-connections)
-
--tls-timeout¶ TLS handshake timeout
-
--trace¶ Enable even more logging than –debug.
-
--version¶ Show version