OpenSSL on Support Tools

Advanced PKI Certificate Management for Enterprise Infrastructure: Complete Implementation Guide

Mon, 13 Apr 2026 00:00:00 -0500

Public Key Infrastructure (PKI) forms the backbone of modern enterprise security, enabling secure communications, authentication, and data integrity across distributed systems. This comprehensive guide covers advanced PKI certificate management strategies, from establishing certificate authorities to implementing automated certificate lifecycle management in large-scale enterprise environments.

Advanced Linux Security and Cryptography Programming: Building Secure Systems and Encryption Frameworks

Fri, 02 May 2025 10:00:00 -0500

Advanced Linux security programming requires comprehensive understanding of cryptographic principles, secure coding practices, and system-level security mechanisms. This guide explores building robust security frameworks, implementing custom cryptographic solutions, and developing applications that meet the highest security standards for enterprise and government environments.

Add a CA Certificate to Ubuntu: update-ca-certificates

Thu, 12 Oct 2023 23:18:00 -0500

To trust a private or self-signed certificate authority on Ubuntu, put the CA certificate in /usr/local/share/ca-certificates/ with a .crt extension and run sudo update-ca-certificates. That rebuilds /etc/ssl/certs/ca-certificates.crt, the bundle that curl, wget, git, apt, OpenSSL and most other tools on Ubuntu read. The procedure is identical on Ubuntu 22.04, 24.04 and 26.04. This guide covers getting the right certificate, the expected output, the three mistakes that make it silently do nothing, and the applications that ignore the system store.

How to generate expired SSL certificates using OpenSSL and Faketime

Thu, 21 Oct 2021 00:04:00 +0000

While playing with SSL certificates and Kubernetes, I wanted to see how Kubernetes respond when its certificates have expired. Since Rancher/RKE uses self-signed certificates, I was able to play with different configurations. The lowest duration of validity we can give to the certificate is one day. I’m not patient enough to wait for a day to let the certificate expire. So I wanted to find a way to generate certificates that are expired at the time of generation itself.

How to become a local CA, and sign your own SSL certificates

Tue, 19 Nov 2019 20:17:00 +0000

Sometimes when you experiment with some apps and VMs (like hosting gitlab on a local server or running a Rancher lab cluster) you might want to setup SSL for the app to work, to mimic the live setup and to make the browser happy. In order to do that, you need a SSL certificate.

You can buy one for your domain from a trusted CA, but if you’re working on a local network, that might not be possible. The other solution is… becoming CA yourself and issuing and signing the certificate yourself!

It’s pretty easy, you need a linux box with openssl installed, then follow these instructions: