About this repository

CI/CD Generated EV SSL certificate requests and keys

How to

1. git clone https://github.com/Dallas-Makerspace/PKI.git dms-pki && cd $_
2. export FQDN="my.example.tld"
3. mkdir -p $FQDN/pki/ && touch $FQDN/pki/.gitkeep
4. cp config.template $FQDN/config
5. $EDITOR $FQDN/config
6. update lines 1 and 2 with correct $FQDN and ip address
7. append additionally needed DNS.# and IP.# in the san_records block
8. update .travis.yml DOMAIN: value to match your "$FQDN"
9. git commit && git push
10. click on the job status here and collect the csr and server.key
11. pass the csr to a top level CA such as letsencrypt, CACerts.org, or Verisign
12. scp server.key and returned server.crt to foundation servers `/srv/ssl/$FQDN.{key,crt}