Skip to content

TLS CA generator

Create a module that can generate an arbitrary (yet simple) CA + certificates. The primary use is for OpenVPN for now, but we may want to reuse it for other things as well.

  • The backend script
  • cron script for regeneration of all CRLs
  • lua plugin
  • Packaging
  • Revocation (or maybe a follow-up ticket?)
  • Reasonable error messages
  • Get rid of the „lost“ status.
  • --help message.

Current problems:

  • The lockfile isn't deleted when the script crashes. Why?
  • Check the letters in serial are OK.
  • The index.txt contains another column when the certificate is revoked. Be able to handle it.
  • Doesn't list a certificate that is being generated.
  • Getting rid of the generating and lock files automatically (at least on reboot, but possibly in other cases).