Skip to content

Latest commit

 

History

History
32 lines (26 loc) · 1001 Bytes

README.md

File metadata and controls

32 lines (26 loc) · 1001 Bytes
Raw

Dummy PKI

In order to keep myself from manually creating these over and over (yes, this is a problem), I've decided to make a set for the world. This set should outlive me.

I would not recommend using these for anything other than testing.

To generate your own from this repo, then do this:

rm -rf output
./generate.sh

To verify signatures, do this:

(
    cd output
    openssl verify -CAfile root.pem intermediate.pem
    openssl verify -CAfile root.pem -untrusted intermediate.pem server.pem
    openssl verify -CAfile root.pem -untrusted intermediate.pem client.pem
)

To generate a set that you can actually use for something, I would recommend:

  • bringing the expiration date around 99 years closer
  • making the key sizes bigger (I go by 128-bit equivalents)
  • changing the subject fields
  • changing the hostnames

I probably didn't write this for you unless I'm reading this. I just seriously needed to stop solving this problem.