feat: add tls

cert/Makefile

@@ -0,0 +1,38 @@
+ca:
+	openssl genrsa -out ca.key 2048
+	openssl req -new -x509 -days 3650 \
+		-subj "/C=GB/L=China/O=gd/CN=ca.com" \
+		-key ca.key -out ca.pem
+
+server:
+	openssl genrsa -out server.key 2048
+	openssl req -new \
+		-subj "/C=GB/L=China/O=server/CN=server.grpc.io" \
+		-key server.key \
+		-out server.csr
+	openssl x509 -req -sha256 \
+		-CA ca.pem -CAkey ca.key -CAcreateserial -days 3650 \
+		-extfile server-ext.cnf \
+		-in server.csr \
+		-out server.pem
+
+client:
+	openssl genrsa -out client.key 2048
+	openssl req -new \
+		-subj "/C=GB/L=China/O=client/CN=client.grpc.io" \
+		-key client.key \
+		-out client.csr
+	openssl x509 -req -sha256 \
+		-CA ca.pem -CAkey ca.key -CAcreateserial -days 3650 \
+		-extfile client-ext.cnf \
+		-in client.csr \
+		-out client.pem
+
+vca:
+	openssl x509 -text -noout -in ca.pem
+
+vsrv:
+	openssl x509 -text -noout -in server.pem
+
+vcli:
+	openssl x509 -text -noout -in client.pem