I provide technical capabilities as a manager, architect and engineer. Lets connect, have lunch and talk about what we can achieve. Deep experience (20+ years), $50k+ in Servers/AI systems.
I run my own internal Certificate Authority, to make building servers internally cheaper, and easier. Below is a script I put together that does virtually everything I need SSL related in the terminal. I just happened to be deploying something and I wanted to unify some of my workflow, and this is the output. Maybe It's something you need too, or just want to play around with certificates and signing? I know its a bit confusing at first with the nested relationships. A CA is a certificate that ISSUES other certificates. It's the thing at the bottom of the list of things that says.. everything signed by me is trusted. When doing your own hosting. Having your own CA can save you a metric ton of cash. The rules are simple. You can make and sign as many certificates as you like for free, but they are only trusted if the person/device visiting the endpoints has your CA cert installed. For myself, I install my CA Bundle on all my machines, and viola.. no problem. External endpoints I just pay for certs/wildcard certs. This script will setup a CA ROOT cert and an intermediate CERT for a given domain. It will also create a Certificate signing request for a SSL cert and then Sign it with the Intermediate CA. Generally it helps with setup creation, and deployment of SSL CA/s and Certs. Yes this could have been ansible... or.. I can avoid all that and just make a single script that works.. Lets not over complicate things bro. Below is the script menu, to give you an idea of what it does. SSL Certificate Management Menu: 1. List Certificate Authorities 2. Deploy CA to Remote Server 3. Install CA on Remote Server 4. Install CA locally/Update CA Trust 5. Create SSL Certificate 6. Deploy SSL Certificate to Server 7. Copy Public key to Remote Server 8. Create CA and Intermediate CA 9. Create and deploy a java keystore for existing certificate As always, everything I do is opensource. I welcome feedback and collaboration. Repo: https://lnkd.in/ea3YSfkw #bash, #ssl, #certificateauthority, #ca,#csr, #homelab
