Bright Zheng brightzheng100

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

Lets get some context first.

$ mkdir private certs cnf csr crl
$ touch index.txt
$ echo 1000 > serial

Please refer to here for how to generate internal CA.

$ openssl genrsa -out private/example.key.pem 2048

$ cat > cnf/example.cnf <<EOF
[ req ]

Assuming we have forked the repo.

Now we clone our forked repo:

$ git clone [email protected]:YOUR-USERNAME/THE-REPO.git

If we bosh scp directly to folders under /var/vcap/jobs/xxx/config, you will encounter Permission denied like:

$ bosh -e lite -d concourse4 scp concourse.yml web:/var/vcap/jobs/uaa/config/

Using environment '192.168.50.6' as client 'admin'

	Started by an SCM change
	Building in workspace /var/jenkins_home/workspace/springboot-jersey-swagger
	> git rev-parse --is-inside-work-tree # timeout=10
	Fetching changes from the remote Git repository
	> git config remote.origin.url http://192.168.56.118:3000/bright/springboot-jersey-swagger.git # timeout=10
	Fetching upstream changes from http://192.168.56.118:3000/bright/springboot-jersey-swagger.git
	> git --version # timeout=10
	using .gitcredentials to set credentials
	> git config --local credential.username bright # timeout=10
	> git config --local credential.helper store --file=/tmp/git6216967762445272219.credentials # timeout=10

	Console Output

	Started by user Bright Zheng
	[EnvInject] - Loading node environment variables.
	Building in workspace /var/jenkins_home/workspace/springboot-jersey-swagger
	> git rev-parse --is-inside-work-tree # timeout=10
	Fetching changes from the remote Git repository
	> git config remote.origin.url http://192.168.56.118:3000/bright/springboot-jersey-swagger.git # timeout=10
	Fetching upstream changes from http://192.168.56.118:3000/bright/springboot-jersey-swagger.git
	> git --version # timeout=10

	#!/bin/bash

	ORIGINAL_TARGET_ORG=`cf target \| awk '/org:/{ print $2 }'`
	ORIGINAL_TARGET_SPACE=`cf target \| awk '/space:/{ print $2 }'`

	ALL_ORGS=(`cf orgs \| awk 'NR > 3'`)

	# flag for printing the header
	PRINT_HEADER=0

	#!/bin/bash

	# Dependencies: cf, jq >= 1.5

	set -euo pipefail
	umask 0077

	PROPERTIES_TO_SHOW_H=("#" guid name last_operation last_operation_at service_name organization space)
	PROPERTIES_TO_SHOW=(.metadata.guid .entity.name .entity.last_operation.state .entity.last_operation.updated_at .extra.service_name .extra.organization .extra.space)