1resource "tls_private_key" "server" {
2  algorithm = "RSA"
3  rsa_bits = "2048"
4}
5
6resource "tls_cert_request" "server" {
7  key_algorithm = tls_private_key.server.algorithm
8  private_key_pem = tls_private_key.server.private_key_pem
9
10  subject {
11    common_name = "Tonic Test Server Cert"
12  }
13
14  dns_names = [
15    "*.test.google.fr",
16  ]
17}
18
19resource "tls_locally_signed_cert" "server" {
20  cert_request_pem = tls_cert_request.server.cert_request_pem
21
22  ca_key_algorithm = tls_private_key.root.algorithm
23  ca_private_key_pem = tls_private_key.root.private_key_pem
24  ca_cert_pem = tls_self_signed_cert.root.cert_pem
25
26  validity_period_hours = 43800
27  early_renewal_hours = 8760
28
29  allowed_uses = ["server_auth"]
30}
31
32resource "local_file" "server_cert" {
33  filename = "../server1.pem"
34  content = tls_locally_signed_cert.server.cert_pem
35}
36
37resource "local_file" "server_key" {
38  filename = "../server1.key"
39  content = tls_private_key.server.private_key_pem
40}
41