Further reading
To learn more about the subject, refer to the following material:
- Certificates on Ubuntu (in particular, building a CA): https://ubuntu.com/server/docs/security-certificates
- OpenSSL home page: https://www.openssl.org/
- Network Security with OpenSSL: https://www.amazon.com/Network-Security-OpenSSL-John-Viega/dp/059600270X
- CT: https://certificate.transparency.dev
- CA operations on OpenSUSE (using YaST): https://doc.opensuse.org/documentation/leap/archive/42.3/security/html/book.security/cha.security.yast_ca.html
- CA operations on Red Hat-based-distributions (using Certificate Manager): https://access.redhat.com/documentation/en-us/red_hat_certificate_system/9/html/planning_installation_and_deployment_guide/planning_how_to_deploy_rhcs
- Easy-RSA: https://github.com/OpenVPN/easy-rsa
- ACME-enabled CAs:
Smallstep CA: https://smallstep.com/
Boulder CA: https://github.com/letsencrypt/boulder