Le mardi 10 juin 2014 à 13:32 +0200, Thomas Raschbacher a écrit :
> I found XCA quite helpful (since I only generate SSL certificates 
> now and then I had some basic scripts but i always forgot some
> command 
> line - or lost my script ^^

Buy a cheap refurbished laptop (some of them are even rugged, like the
Panasonic Tough CF line and can be bought for 300 USD) and initialize it
with a crypto file system. Remove wireless cards and install a very
minimal system. 

Then use XCA to generate the CA and the client certs.

Once your crypto laptop is initialized, never connect it to the
Internet.

Kind regards,
Kellogs

_______________________________________________
DBmail mailing list
[email protected]
http://mailman.fastxs.nl/cgi-bin/mailman/listinfo/dbmail

Reply via email to