[aklug] Re: Easy CA Tool?

You can enjoy doing it in bash, maybe?

https://github.com/akhepcat/bashca

Don't hate me.


Or you could go full-cray and set up a Dogtag system
http://pki.fedoraproject.org/wiki/PKI_Main_Page




-----Original Message-----
From: aklug-bounce@aklug.org [mailto:aklug-bounce@aklug.org] On Behalf Of Christopher Howard
Sent: Tuesday, October 11, 2016 5:00 PM
To: AKLUG
Subject: [aklug] Easy CA Tool?

[External Email]

Hi list. What tool would you recommend for being your own certificate
authority, as very easy to use, but still getting the certs done
correctly? (For personal use.) I spent about 4 hours learning how to use
Gnomint and creating and installing certificates, only to discover that
the way it formats the root cert violates some standard which causes it
to generate a fatal SSL error in all Web browsers.
(SEC_ERROR_INADEQUATE_CERT_TYPE in Firefox: apparently has something to
do with the extendedKeyUsage field.)

--
https://qlfiles.net
My PGP public key ID is 0x340EA95A (pgp.mit.edu).

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.

N‹§²æìr¸›zǧu隊[hjIn‚·ª¹ë-jIn‚ŠàÂ+aº{.nÇ+‰·¢žØ^™ë,j›
Received on Wed Oct 12 15:30:25 2016