pitachx

# Assumptions: easyrsa3 available in current dir, and functional openssl.
# This basic example puts the "offline" and "sub" PKI dirs on the same system.
# A real-world setup would use different systems and transport the public components.

# Build root CA:
EASYRSA_PKI=offline ./easyrsa init-pki
EASYRSA_PKI=offline ./easyrsa build-ca nopass

# Build sub-CA request:
EASYRSA_PKI=sub ./easyrsa init-pki

pitachx

#
# /etc/sysctl.conf - Configuration file for setting system variables
# See /etc/sysctl.d/ for additional system variables.
# See sysctl.conf (5) for information.
#

#kernel.domainname = example.com

# Uncomment the following to stop low-level messages on console
#kernel.printk = 3 4 1 3

pitachx

Keybase proof

I hereby claim:

• I am pitachx on github.
• I am bers (https://keybase.io/bers) on keybase.
• I have a public key ASBmH78PzrPRCnDfqd5Wk1wRaVJ1uKTTjkOYHEywZRmw_wo

To claim this, I am signing this object: