User Tools

Site Tools


crypto:x509

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
crypto:x509 [2020-05-23 13:57] – updating gabrielcrypto:x509 [2020-05-27 16:56] (current) – reformatting page, tutorial is now on GitLab gabriel
Line 1: Line 1:
-====== Creating an intermediate and root certificate authority with OpenSSL ======+====== The Quay Certificate Authority ====== 
 + 
 +The current versions of certificates and CRLs can be found here: 
 + 
 +  * **CA root:** https://quay.net/pub/ca/root-q2.crt 
 +    * **Root CRL:** https://quay.net/pub/ca/root-q2.crl 
 + 
 +  * **Intermediate signing certificate:** https://quay.net/pub/ca/sign-s2.crt 
 +    * **Intermediate CRL:** https://quay.net/pub/ca/sign-q2.crl 
 + 
 +====General comments =====
  
 Generally speaking, [[https://letsencrypt.org/|Let's Encrypt]] is a better solution than using a self-hosted certificate authority in 2020.  For most users this is what I recommend. Generally speaking, [[https://letsencrypt.org/|Let's Encrypt]] is a better solution than using a self-hosted certificate authority in 2020.  For most users this is what I recommend.
Line 13: Line 23:
 Work in progress. Work in progress.
  
-===== Notes ===== 
- 
-I publish the CA certificates and CRLs in the unlikely event that somebody outside my network might require them: 
- 
-  * **CA root:** https://quay.net/pub/ca/root-q2.crt 
-    * **Root CRL:** https://quay.net/pub/ca/root-q2.crl 
-  * **Intermediate signing certificate:** https://quay.net/pub/ca/sign-s2.crt 
-    * **Intermediate CRL:** https://quay.net/pub/ca/sign-q2.crl 
crypto/x509.txt · Last modified: 2020-05-27 16:56 by gabriel