Skip to content

Instantly share code, notes, and snippets.

View amolkahat's full-sized avatar
🌄
Working from home

Amol Kahat amolkahat

🌄
Working from home
View GitHub Profile
@amolkahat
amolkahat / ca_with_nss.sh
Last active September 3, 2018 13:19
Generating CA certificate and Server certificate with nss.
# cat ca_with_nss.sh
mkdir -p /root/nssdb
echo "SECret.123" > /root/nssdb/password.txt
certutil -N -d /root/nssdb -f /root/nssdb/password.txt
openssl rand -out /root/nssdb/noise.bin 2048
SKID="0x`openssl rand -hex 20`"
OCSP="http://$HOSTNAME:8080/ca/ocsp"
echo -e "y\n\ny\ny\n${SKID}\n\n\n\n${SKID}\n\n2\n7\n${OCSP}\n\n\n\n" | \
certutil -S \
-x \
@amolkahat
amolkahat / satellite_cert_generator.sh
Last active September 3, 2018 09:56 — forked from ntkathole/satellite_cert_generator.sh
Script to generate certificates for satellite server
country=IN
state=Maharashtra
locality=Pune
organization=redhat
organizationalunit=QE
commonname=$(hostname)
openssl genrsa -out rootCA.key 2048
openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem -subj "/CN=CA Cert/O=$organization/OU=$organizationalunit"
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/C=$country/ST=$state/L=$locality/O=$organization/OU=$organizationalunit/CN=$commonname"

Keybase proof

I hereby claim:

  • I am amolkahat on github.
  • I am amolkahat (https://keybase.io/amolkahat) on keybase.
  • I have a public key ASDfu-DHzUHZeDTHn_aRuLQ_Z3sYsmmvviYQ2NRcTgIFvwo

To claim this, I am signing this object: