gmarik gmarik

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

Option 1: Command-line download extension as zip and extract

extension_id=jifpbeccnghkjeaalbbjmodiffmgedin   # change this ID
curl -L -o "$extension_id.zip" "https://clients2.google.com/service/update2/crx?response=redirect&os=mac&arch=x86-64&nacl_arch=x86-64&prod=chromecrx&prodchannel=stable&prodversion=44.0.2403.130&x=id%3D$extension_id%26uc" 
unzip -d "$extension_id-source" "$extension_id.zip"

Thx to crxviewer for the magic download URL.

Some improvements have been made for parser and lexer grammars in Jison 0.3 (demonstrated in the FlooP/BlooP example below.)

For lexers:

Patterns may use unquoted characters instead of strings
Two new options, %options flex case-insensitive
flex: the rule with the longest match is used, and no word boundary patterns are added
case-insensitive: all patterns are case insensitive
User code section is included in the generated module

	package main

	import (

	"net/http"
	"net/url"
	"runtime"
	"strings"
	"context"
	"bytes"

	(use '[clojure.core.match :only [match]])

	(defn evaluate [env [sym x y]]
	(match [sym]
	['Number] x
	['Add] (+ (evaluate env x) (evaluate env y))
	['Multiply] (* (evaluate env x) (evaluate env y))
	['Variable] (env x)))

	(def environment {"a" 3, "b" 4, "c" 5})

	Latency Comparison Numbers (~2012)
	----------------------------------
	L1 cache reference 0.5 ns
	Branch mispredict 5 ns
	L2 cache reference 7 ns 14x L1 cache
	Mutex lock/unlock 25 ns
	Main memory reference 100 ns 20x L2 cache, 200x L1 cache
	Compress 1K bytes with Zippy 3,000 ns 3 us
	Send 1K bytes over 1 Gbps network 10,000 ns 10 us
	Read 4K randomly from SSD* 150,000 ns 150 us ~1GB/sec SSD