OpenSSL PKI for Lab Environments - RSA and ECDSA Signature Algorithms
Part 1: OpenSSL PKI using an RSA Signature Algorithm
Part 2: OpenSSL PKI using an ECDSA Signature Algorithm
Part 3: Run CRL/AIA and OCSP services in Docker, front with NetScaler CPX Express Content Switching vServers
Disclaimer: This isn’t meant to serve as a configuration guide for an enterprise level PKI. The security requirements around a system as such would be much more tight.
Working version of the full post is available here: https://raw.githubusercontent.com/mattbodholdt/OpenSSLCA/master/OpenSSL_PKI_Full.txt