Erik Arvstedt e1e3d8a92b
secrets: simplify cert generation
- Remove openssl.cnf which includes many unused settings.
- Generate the key and cert files with a single call to openssl.
  - Option `-nodes` ("no DES") disables encryption of the key file.
  - Option `-addext` is used to specify `subjectAltName` settings
    that were previously defined by openssl.cnf.

The key type is unchanged.
Certificate changes:
- Certificate duration is now 10 years
- Organization (subj 'O') is now 'loop' instead of 'loopd' for
  lightning-loop to simplify the code.
  For reference, the org. name in auto-generated loop certs is
  "loop autogenerated cert".
- The certificate now includes all default x509v3 extensions.
  These were previously restricted to just `subjectAltName` by openssl.cnf.
  We now use the openssl defaults for simplicity.
2021-09-11 15:07:24 +02:00
..
2021-05-05 09:04:18 +00:00
2021-09-05 22:33:17 +02:00
2021-09-11 15:07:23 +02:00
2021-02-23 10:36:30 +00:00
2021-08-26 12:45:10 +02:00
2021-08-15 11:29:36 +02:00
2021-08-26 12:45:10 +02:00
2021-08-26 12:45:10 +02:00