Skip to content

Files and instructions for generating a Root CA and End Entity certificates for PIV smart cards (e.g: YubiKey) using OpenSSL

License

Notifications You must be signed in to change notification settings

sophie-s1/Mini-CA

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Mini CA

A python based tool for generating and managing OpenSSL keys and certificates

Guide: https://sophie.smeeton.icu/security/openssl-toolkit/ #Not active link

Requires python 3.10+, openssl, opensc (Smart card support), libp11 (Smart card support)

TODO:

  • Update PIV configs
  • Add systemd service for periodicaly updating CRLs
  • Add proper error handeling
  • Allow picking Key type for CA

Potential future features:

  • Intermediate CA support
  • Run with args from cmdline

About

Files and instructions for generating a Root CA and End Entity certificates for PIV smart cards (e.g: YubiKey) using OpenSSL

Topics

Resources

License

Stars

Watchers

Forks

Languages