certifix

commit 1a3e7918b24ff4ca1ade6f580fe2f696e667118d
parent 27f2718ec5dfd99a091f0b38c9f588d433dd4c4c
Author: Daniel Barlow <dan@telent.net>
Date:   Wed, 25 Sep 2024 21:34:27 +0100

add title

Diffstat:
M
README.md
 | 
13
++++++++-----

1 file changed, 8 insertions(+), 5 deletions(-)
diff --git a/README.md b/README.md
@@ -1,6 +1,9 @@
-A small HTTP(S)[*] API that accepts X509 CSRs and signs them if they
-contain the magic number (specifically, if they have a custom
-`challengePassword` attribute containing a pre-agreed value)
+# Certifix
+
+Not an Asterix character.  A small HTTP(S)[*] API that accepts X509
+CSRs and signs them if they contain the magic number (specifically, if
+they have a custom `challengePassword` attribute containing a
+pre-agreed value)
 
 Modelled on the Puppet CA "Policy-based autosigning" functionality,
 but without the rest of Puppet
@@ -32,11 +35,11 @@ echo 'urban cookie collective' > psk
 chmod 0700 psk
 
 # create CA key and cert
-openssl genrsa -out ca.key 4096  
+openssl genrsa -out ca.key 4096
 CN=CA openssl req -config openssl.cnf -x509 -new -nodes -key ca.key -sha256 -days 3650  -out ca.crt
 
 # create client CSR
-CN=rotuer openssl req -config openssl.cnf -newkey rsa:2048 -nodes -keyout client.key -out client.csr 
+CN=rotuer openssl req -config openssl.cnf -newkey rsa:2048 -nodes -keyout client.key -out client.csr
 
 # start the server
 bin/certifix