Certificate Authority 🔐

1. 📥 Download Tool
   Get smsgate-ca for your OS

2. 🔧 Generate Certificate
   

   Generate webhook certificate

   ./smsgate-ca webhooks --out=server.crt --keyout=server.key 192.168.1.10
   

   Generate server certificate

   ./smsgate-ca private 10.0.0.5 # (1)!
   

   1. --out and --keyout are optional with default server.crt and server.key

3. 🔐 Install Certificates
   

   # Nginx example
   ssl_certificate /path/to/server.crt;
   ssl_certificate_key /path/to/server.key;
   

1. 🔑 Generate Key Pair

   openssl genrsa -out server.key 2048
   

2. 📝 Create Config

   server.cnf

   [req]
   distinguished_name = req_distinguished_name
   x509_extensions = v3_req
   prompt = no
   
   [req_distinguished_name]
   CN = 192.168.1.10  # (1)!
   
   [v3_req]
   keyUsage = nonRepudiation, digitalSignature, keyEncipherment
   extendedKeyUsage = serverAuth
   subjectAltName = @alt_names
   
   [alt_names]
   IP.0 = 192.168.1.10
   

   1. Replace 192.168.1.10 with your private IP

3. 📋 Generate CSR

   openssl req -new -key server.key -out server.csr -extensions v3_req \
     -config ./server.cnf
   

4. 📨 Submit CSR

   jq -n --arg content "$(cat server.csr)" '{content: $content}' | \
   curl -X POST \
     -H "Content-Type: application/json" \
     -d @- \
     https://ca.sms-gate.app/api/v1/csr
   

   You will receive a Request ID in the response.

5. 🕒 Check Status

   curl https://ca.sms-gate.app/api/v1/csr/REQ_12345 # (1)!
   

   1. Replace REQ_12345 with your Request ID

6. 📥 Save Certificate
   When the request is approved, the certificate content will be provided in the certificate field of the response. Save the certificate content to the file server.crt.

7. 🔐 Install Certificate
   Install the server.crt and server.key (from step 1) files to the server.

Full API documentation is available here.