MOD: more serious re-org to support the new PKI Lifecycle gerneration
This commit is contained in:
parent
1816ecc5a2
commit
d3af83080f
|
@ -1,6 +1,7 @@
|
|||
[[[ Certificate Code Command & Control ]]]
|
||||
|
||||
|
||||
[ p12 file ]
|
||||
# show the sections of the package file
|
||||
$ openssl pkcs12 -in ~/cert.p12 -nodes -passin pass:"password"
|
||||
|
||||
|
|
|
@ -1,5 +1,7 @@
|
|||
[[[ Certificate Overlord ]]]
|
||||
|
||||
|
||||
[ Features ]
|
||||
* GUI with modern design (responsive)
|
||||
-modern form input features: auto complete, highlighting
|
||||
* simple wizard
|
||||
|
|
|
@ -3,35 +3,28 @@
|
|||
|
||||
[[ WORKING ]]
|
||||
|
||||
* CA-I serial #s ??
|
||||
X.p12 file for CA-I (to import into M$ products)
|
||||
-.p12 file extractor for MH provisioning
|
||||
* create GUI for cert gen process (electron+crypto-interface)
|
||||
* create certificate installation guide
|
||||
-copy file to sd, select .p12 file, password="password"
|
||||
* can I install certificates from an android application??
|
||||
-can I used knox to install certificates??
|
||||
* PKI Bootstrap: cp lifecycle functions
|
||||
|
||||
* gen servers
|
||||
-make sure the serial# is incremented
|
||||
|
||||
* gen clients
|
||||
-make sure the serial# is incremented
|
||||
|
||||
|
||||
[[ BACKLOG ]]
|
||||
|
||||
[ ver3 ]
|
||||
[ current ]
|
||||
* auto-increment SERIAL
|
||||
* create certificate installation guide
|
||||
-copy file to sd, select .p12 file, password="password"
|
||||
* can I install certificates from an android application??
|
||||
-can I used knox to install certificates??
|
||||
* create GUI for cert gen process (electron+crypto-interface)
|
||||
* add tool for .p12 file extractor for MH provisioning
|
||||
|
||||
|
||||
[ ver 1.4 ]
|
||||
* create new "certificate bootstrap" with .cfg parameters for CA ".mil" strings
|
||||
* create new CA generation script that also reads .cfg
|
||||
* create new CA-I generation script that uses a CA
|
||||
-also packages .p12 for distrobution (use random high quality password)
|
||||
* create new client generation script that uses CA-I
|
||||
-just for testing purposes
|
||||
* create new server generation script that uses CA-I
|
||||
-just for testing purposes
|
||||
* update ver3/conf so that ipsec.conf is default
|
||||
-update ipsec_dev.conf to have developer
|
||||
|
||||
|
||||
[ bootstrap cert chain-of-trust ]
|
||||
|
@ -41,12 +34,25 @@
|
|||
-sneakernet two CA-I
|
||||
|
||||
|
||||
[ ver 1.5 ]
|
||||
|
||||
[ ver4 ]
|
||||
|
||||
|
||||
|
||||
|
||||
[[ STORIES ]]
|
||||
|
||||
PKI Bootstrap
|
||||
-generate a PKI Lifecycle Package
|
||||
|
||||
PKI Lifecycle Package
|
||||
* Local Lifecycle : CA-I generation
|
||||
|
||||
* Remote Lifecycle : CA-I distributed to organizations
|
||||
-generate client/server certificates
|
||||
|
||||
|
||||
|
||||
[[ COMPLETED ]]
|
||||
|
||||
|
||||
|
|
|
@ -1 +1 @@
|
|||
10000
|
||||
101
|
Loading…
Reference in New Issue