Re: [openssl-users] Is there a "Golden" CA makefile?

2017-05-02 Thread Jakob Bohm
On 30/04/2017 13:52, Jochen Bern wrote: On 04/29/2017 09:55 PM, John Lewis got digested: I am looking for a CA makefile to use with a openvpn tutorial I am writing https://github.com/Oflameo/openvpn_ws. Is there one officially endorsed by the openssl project? Since you're specifically mentionin

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-30 Thread Jochen Bern
On 04/29/2017 09:55 PM, John Lewis got digested: > I am looking for a CA makefile to use with a openvpn tutorial I am > writing https://github.com/Oflameo/openvpn_ws. Is there one officially > endorsed by the openssl project? Since you're specifically mentioning Open*VPN*, let me mention that Easy

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread John Lewis
I fought easypki for a week trying to figure out how to actually use a Sub CA and couldn't find one. I'm not going to teach anyone not to use a Sub CA because that would be malpractice in my opinion. On Sat, 2017-04-29 at 23:53 +0100, Alan Buxey wrote: > https://github.com/google/easypki , > htt

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread Alan Buxey
https://github.com/google/easypki , http://pki.fedoraproject.org/wiki/PKI_Main_Page etc etc - we wrote a simple similar system when using OpenVPN years ago. it was (IMHO) very good but the powers that be decided that OpenVPN wasn't the way to go and so money was spent on a (inflexible and non-modif

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread Salz, Rich via openssl-users
I can point you to https://github.com/richsalz/pki-webpage But it is *not official* and may not work for what you want. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread John Lewis
You misunderstand. I don't want a list of vetted root CAs. I just want a make based wrapper over the OpenSSl commands to make it easier to run a CA. There are a few of them, but if there was a one that is typically recommended instead, I would use that one. On Sat, 2017-04-29 at 12:55 -0700, Kyl

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread Kyle Hamilton
The short answer is "no". The long answer is, OpenSSL is not in the business of vetting trust roots. Its business is ensuring that TLS-secured communications happen correctly when it is used. If you want an 'endorsed' set of roots, you can find such from other projects (that have no relation to O

Re: [openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread Salz, Rich via openssl-users
> I am looking for a CA makefile to use with a openvpn tutorial I am writing > https://github.com/Oflameo/openvpn_ws. Is there one officially endorsed > by the openssl project? If there were, it would be in the source distribution. -- openssl-users mailing list To unsubscribe: https://mta.openssl

[openssl-users] Is there a "Golden" CA makefile?

2017-04-29 Thread John Lewis
I am looking for a CA makefile to use with a openvpn tutorial I am writing https://github.com/Oflameo/openvpn_ws. Is there one officially endorsed by the openssl project? -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users