Settings

Theme

Set up your own Ruby-powered Certificate Authority

langui.sh

21 points by pennig 13 years ago · 2 comments

Reader

tptacek 13 years ago

You can also do this with OpenSSL's x509 code; we have a 50 line Ruby function that mints new validly-signed signatures from a CA=YES signature generated by the OpenSSL command line tools.

  • reaperhulk 13 years ago

    Absolutely. r509 (which this tutorial uses) is fundamentally a wrapper around the OpenSSL bindings of Ruby. It doesn't do anything that you can't do without it; it just tries to present certificate generation/revocation/management in a simpler manner.

    This is most evident in the OCSP responder, which leverages sections of the Ruby OpenSSL code that have...limited documentation (see: http://www.ruby-doc.org/stdlib-1.9.3/libdoc/openssl/rdoc/Ope...)

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection