Hacker GitHub

← All repos

OpenVPN/easy-rsa

View on GitHub ↗ ★ 4,486 Shell

easy-rsa - Simple shell based CA utility

12 mentions on Hacker News by 11 people: 0 stories, 12 comments · first 2015-01-04 · latest 2025-02-18

Mentions per year 12 mentions · busiest year 2015 (5)
20082026
AllStoriesComments NewestTopOldest
  1. See also easy-rsa https://github.com/OpenVPN/easy-rsa
    comment by kswagage · 2025-02-18 · in Setting up a trusted, self-signed SSL/TLS certificate authority in Linux
  2. …software' for running a CA: * https://github.com/smallstep / https://smallstep.com/docs/step-ca/ * https://github.com/OpenVPN/easy-rsa * https://hohnstaedt.de/xca/ * https://github.com/FiloSottile/mkcert (good for on-one-host dev stuff)
    comment by throw0101d · 2024-06-11 · in The Backbone of Cybersecurity: Hardware Security Modules
  3. Easy-rsa to the rescue. Been using it for a while, works great and makes life easier :) Link: https://github.com/OpenVPN/easy-rsa Summary from that page: easy-rsa is a CLI utility to build and manage a PKI CA. In laymen's terms, this means…
    comment by JackGreyhat · 2023-09-16 · in Running one’s own root Certificate Authority in 2023
  4. …single coworker a certificate on their own smartcard? If not, PKI is most probably not needed. https://github.com/OpenVPN/easy-rsa + two USB thumb drives in a safe (primary + backup) + one off-site in another safe. Client certificates are…
    comment by moviuro · 2019-01-14 · in Ask HN: Where do you get CA validated “Client Certificates”?
  5. Personally, I tend to use the easy-rsa set of scripts https://github.com/OpenVPN/easy-rsa . Initially they used to come as a goodies with OpenVPN, but they are now provided as a standalone project. There are already packaged and available…
    comment by kakwa_ · 2018-10-26 · in Show HN: I made a script to generate self-signed SSL certs for local development
  6. You can also use the good old EASY-RSA: https://github.com/OpenVPN/easy-rsa
    comment by compuguy · 2018-07-11 · in Chrome will mark all HTTP sites as ‘not secure’ starting in July
  7. …dhparam -out "$out_file" $EASYRSA_KEY_SIZE || \ die "Failed to build DH params" notice "\ https://github.com/OpenVPN/easy-rsa/blob/master/easyrsa3/eas...
    comment by subliminalpanda · 2016-12-25 · in Autovpn – Script to Create an OpenVPN Endpoint on AWS
  8. …default size in the vars file before doing so, your server uses a 1024 bit diffie hellman key. [1] https://github.com/OpenVPN/easy-rsa
    comment by decisiveness · 2015-10-16 · in How to Protect Yourself from NSA Attacks on 1024-bit DH
  9. …came up with an import strategy that I think works pretty well.[3] Please examine and break it! [1] https://github.com/OpenVPN/easy-rsa [2] https://github.com/brianclements/pkictl [3] https://github.com/brianclements/pkictl#import
    comment by brianclements · 2015-09-22 · in TinyCert – Become Your Own PKI/CA Authority in a Matter of Minutes
  10. …groups using "safe" primes for each website or server. Is this why with the easy-rsa package ( https://github.com/OpenVPN/easy-rsa ) one should always build a dh pair first? People are using pre-seeded ones when they do not use this tool…
    comment by 616c · 2015-05-20 · in Logjam TLS attack
  11. …more about BSD and pf. I've been doing this but with a Linux VPS, iptables and EasyRSA3[0][1]. [0] https://github.com/OpenVPN/easy-rsa [1] https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-... .
    comment by decisiveness · 2015-01-12 · in Be your own VPN provider with OpenBSD
  12. …because wrestling bare OpenSSL is not something you want to do unless you absolutely have to. [1] https://github.com/OpenVPN/easy-rsa/blob/master/doc/EasyRSA-...
    comment by moe · 2015-01-04 · in How to set up your own Certification Authority (CA) (2013)