~jtv/gwacl/storage-tool-command-line

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
===========================================
GWACL - The Go Windows Azure Client Library
===========================================


(Work In Progress)


Generate an x509 key to talk to Azure
-------------------------------------

Azure requires that API clients use an x509 certificate to authenticate to the
management API. Create the certificate with::

  openssl req -config /usr/share/ssl-cert/ssleay.cnf -x509 -nodes \
    -days 3650 -newkey rsa:2048 -keyout azure.pem -out azure.pem

Note the use of ``ssleay.cnf``.  It just contains some crappy defaults so you
don't get prompted for certificate data.  You can leave it out if you want,
but then you'll need to enter country, organisation, etc.

Azure wants you to upload a ``.cer`` file (which is in DER format).  Here's
how you can extract a ``.cer`` file from the ``.pem``::

   openssl x509 -inform pem -in azure.pem -outform der -out azure.cer

You can now upload ``azure.cer`` to Azure as a management certificate.