[yt-dlp.git] / test / testdata / certificate / instructions.md

# Generate certificates for client cert tests

## CA
```sh
openssl ecparam -name prime256v1 -genkey -noout -out ca.key
openssl req -new -x509 -sha256 -days 6027 -key ca.key -out ca.crt -subj "/CN=ytdlptest"
```

## Client
```sh
openssl ecparam -name prime256v1 -genkey -noout -out client.key
openssl ec -in client.key -out clientencrypted.key -passout pass:foobar -aes256
openssl req -new -sha256 -key client.key -out client.csr -subj "/CN=ytdlptest2"
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 6027 -sha256
cp client.crt clientwithkey.crt
cp client.crt clientwithencryptedkey.crt
cat client.key >> clientwithkey.crt
cat clientencrypted.key >> clientwithencryptedkey.crt
```
Commit	Line	Data
bb58c9ed	1	# Generate certificates for client cert tests
	2
	3	## CA
	4	```sh
	5	openssl ecparam -name prime256v1 -genkey -noout -out ca.key
	6	openssl req -new -x509 -sha256 -days 6027 -key ca.key -out ca.crt -subj "/CN=ytdlptest"
	7	```
	8
	9	## Client
	10	```sh
	11	openssl ecparam -name prime256v1 -genkey -noout -out client.key
	12	openssl ec -in client.key -out clientencrypted.key -passout pass:foobar -aes256
	13	openssl req -new -sha256 -key client.key -out client.csr -subj "/CN=ytdlptest2"
	14	openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 6027 -sha256
	15	cp client.crt clientwithkey.crt
	16	cp client.crt clientwithencryptedkey.crt
	17	cat client.key >> clientwithkey.crt
	18	cat clientencrypted.key >> clientwithencryptedkey.crt
	19	```