JP Vossen on 2 May 2017 10:16:09 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Migrating and updating a CA


On 05/02/2017 01:09 PM, brent timothy saner wrote:
On 05/02/2017 01:00 PM, Michael Leone wrote:
nobody said running your own CA is easy.

No, it's a PITA.  But:

This is AWESOME: https://jamielinux.com/docs/openssl-certificate-authority/

Other possibly useful refs:
* https://danielpocock.com/dvd-based-clean-room-for-pgp-and-pki
** Semi-related: https://wiki.debian.org/OpenPGP/CleanRoomLiveEnvironment
* http://www.rsyslog.com/doc/v8-stable/tutorials/tls_cert_summary.html
* COOL: https://openvpn.net/index.php/open-source/documentation/miscellaneous/77-rsa-key-management.html -->
** https://github.com/OpenVPN/easy-rsa
* http://www.openssl.org/docs/apps/rsa.html
* http://movingpackets.net/2015/03/16/five-essential-openssl-troubleshooting-commands/

Later,
JP
--  -------------------------------------------------------------------
JP Vossen, CISSP | http://www.jpsdomain.org/ | http://bashcookbook.com/
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug