Month: September 2022

Step-CA: Run as a systemd service

Ryan Parker Linux September 15, 2022

Create /etc/systemd/system/step-ca.service Fill it with this, make sure your directories are correct in the ExecStart line: [Unit] Description=step-ca After=syslog.target network.target [Service] User=step Group=step ExecStart=/bin/sh -c '/bin/step-ca /home/step/.step/config/ca.json --password-file=/home/step/.step/pwd >> /var/log/step-ca/output.log 2>&1' Type=simple Restart=on-failure RestartSec=10 [Install] WantedBy=multi-user.target Next, populate the pwd file with the plaintext intermediate CA password. I put mine in /home/step/.step/pwd Next, configure the
Read More »

Step-CA: Change Certificate Authority and Intermediate Authority Encryption type and key size

Ryan Parker Linux September 15, 2022

Step-CA is a decent CA management program but it has one issue, its annoying to set the algorithm on the CA and intermediate CA. So I spent the day figuring it out. Here are the results. Choosing the Right Key Type There are 3 supported key types : EC (elliptic curve), OKP (octet for “Ed25519”
Read More »

OpenSSL CA: make a certificate signing request work on Arch Linux

Ryan Parker Arch, Linux September 15, 2022

#edit /etc/ssl/openssl.cnf Find [ ca ] and make sure this matches: #################################################################### [ ca ] default_ca = CA_default #default ca section #################################################################### [ CA_default ] dir = /etc/ssl # Where everything is kept certs = $dir/certs # Where the issued certs are kept crl_dir = $dir/crl # Where the issued crl are kept database =
Read More »