sha256 keys

[keith6014]

I create keys like this at the moment

openssl req -x509 -newkey rsa:2048 -sha256 -days 1000 -nodes -keyout f.key -out f.crt -subj '/CN=bar'

How can I do something similar using step?

[tashian]

This comes close, hope it helps:

$ cat f.tpl
{
            "subject": {
              "commonName": "bar"
            },
            "issuer": {
              "commonName": "bar"
            },
            "basicConstraints": {
              "isCA": true,
              "maxPathLen": -1
            }
}
$ step certificate create bar f.crt f.key --kty RSA \
     --template f.tpl \
     --not-after 21900h