yum install openssl




 openssl req -nodes -sha256 -newkey rsa:2048 -keyout server.key -out server.csr -subj "/C=US/ST=Unspecified/L=Unspecified/O=Sonatype/OU=Example/CN=*.${NEXUS_DOMAIN}" 

openssl x509 -req -days 7000 -in server.csr -signkey server.key -out server.crt -sha256

openssl pkcs12 -export -in server.crt -inkey server.key -out serverStore.p12 -name "jetty"


 keytool -importkeystore -srckeystore serverStore.p12 -srcstoretype pkcs12 -destkeystore keystore.jks -deststoretype pkcs12   -alias "jetty"  -ext "SAN=DNS:dockertest.example.com" -ext "BC=ca:true"



생성된 keystore.jks 파일을 
/opt/sonatype/nexus/etc/ssl 에 복사한다

나머지는 3.6 참조 


+ Recent posts