Build your own CA, then sign an admin certificate with it.
You'll learn to
generate key → CSR → signed cert with openssl
Recap
- 1key → CSR → signed certificate (openssl)
- 2CN = user name, O = group (not OU)
- 3Servers need SANs: every name and IP
Check yourself
Which field of a client certificate becomes the user's group?
6.6
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.