feat(certificates): switch to EC key generation for server and client certificates

Author: M03ED

Makefile

@@ -65,17 +65,23 @@ SAN ?= DNS:localhost,IP:127.0.0.1
 
 generate_server_cert:
 	mkdir -p ./certs
-	openssl req -x509 -newkey rsa:4096 -keyout ./certs/ssl_key.pem \
-	-out ./certs/ssl_cert.pem -days 36500 -nodes \
-	-subj "/CN=$(CN)" \
-	-addext "subjectAltName = $(SAN)"
+	openssl req -x509 -newkey ec \
+		-pkeyopt ec_paramgen_curve:P-256 \
+		-keyout ./certs/ssl_key.pem \
+		-out ./certs/ssl_cert.pem \
+		-days 3650 -nodes \
+		-subj "/CN=$(CN)" \
+		-addext "subjectAltName = $(SAN)"
 
 generate_client_cert:
 	mkdir -p ./certs
-	openssl req -x509 -newkey rsa:4096 -keyout ./certs/ssl_client_key.pem \
- 	-out ./certs/ssl_client_cert.pem -days 36500 -nodes \
-	-subj "/CN=$(CN)" \
-	-addext "subjectAltName = $(SAN)"
+	openssl req -x509 -newkey ec \
+		-pkeyopt ec_paramgen_curve:P-256 \
+		-keyout ./certs/ssl_client_key.pem \
+		-out ./certs/ssl_client_cert.pem \
+		-days 3650 -nodes \
+		-subj "/CN=$(CN)" \
+		-addext "subjectAltName = $(SAN)"
 
 UNAME_S := $(shell uname -s)
 UNAME_M := $(shell uname -m)