Adam Sherwood theherk

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

GnuPG 2.2.x Build Instructions

Below are my build instructions for GnuPG 2.2.10, released on August 30th, 2018. These instructions are built for a headless Ubuntu 18.04 LTS server (and have also been tested on Ubuntu 14.04/16.04).

If you prefer, you may use the below install script to install GnuPG 2.2.x by running the following commands:

curl -OL "https://gist.githubusercontent.com/vt0r/a2f8c0bcb1400131ff51/raw/e0d2011d7b89bfe5b83c3f29f21949fb21354dd9/install-gnupg22.sh" && sudo -H bash ./install-gnupg22.sh

Install the needed dependencies

This gist contains lists of modules available in

Python 3.10
Python 3.9
Python 3.8
Python 3.7
Python 3.6
Python 2.7

in AWS Lambda.

Based on the Tomorrow Night Eighties theme

Paste the following in the Preferences > Sidebar Theme > Custom Theme import/export field:

#2d2d2d,#393939,#6699cc,#FFFFFF,#515151,#cccccc,#99cc99,#f2777a

	package main

	import (
	"bytes"
	"exec"
	"log"
	"os"
	)

	// Pipeline strings together the given exec.Cmd commands in a similar fashion

	# Add the following 'help' target to your Makefile
	# And add help text after each target name starting with '\#\#'

	help: ## Show this help.
	@fgrep -h "##" $(MAKEFILE_LIST) \| fgrep -v fgrep \| sed -e 's/\\$$//' \| sed -e 's/##//'

	# Everything below is an example

	target00: ## This message will show up when typing 'make help'
	@echo does nothing

	wget http://stedolan.github.io/jq/download/linux64/jq
	aws ec2 describe-instances --filters "Name=tag:Name,Values=$NAME" \
	"Name=instance-state-name,Values=running" \
	\| jq -r \
	".Reservations[] \| .Instances[] \| .InstanceId" \

	aws ec2 describe-volumes --filters \
	"Name=status,Values=available" \
	\| jq -r ".Volumes[] \| .VolumeId" \

	# Install ARCH Linux with encrypted file-system and UEFI
	# The official installation guide (https://wiki.archlinux.org/index.php/Installation_Guide) contains a more verbose description.

	# Download the archiso image from https://www.archlinux.org/
	# Copy to a usb-drive
	dd if=archlinux.img of=/dev/sdX bs=16M && sync # on linux

	# Boot from the usb. If the usb fails to boot, make sure that secure boot is disabled in the BIOS configuration.

	# Set swedish keymap

	Sometimes after a hard reboot (power cut), if your synology cannot be logged in with DSM and it shows "System is getting ready. Please log in later" , please do these steps :

	#Admin login via ssh
	> synobootseq --set-boot-done
	> synobootseq --is-ready
	#optional
	> /usr/syno/etc/rc.d/S97apache-sys.sh start
	> /usr/syno/etc/rc.d/S95sshd.sh start

	#!/usr/bin/env python

	import sys
	import os
	import subprocess
	import logging
	import re
	import getpass

	logging.basicConfig(level=logging.DEBUG, format="%(levelname)s: %(message)s\n")