...
| Reference_description_with_linked_URLs_______________________ | Notes______________________________________________________________ |
|---|---|
| https://www.openssl.org/ | |
| https://www.openssl.org/docs/OpenSSLStrategicArchitecture.html | |
| Openssl Cookbook - reasonably thorough | |
https://www.freecodecamp.org/news/openssl-command-cheatsheet-b441be1e8c4a/ | Common Openssl commands from freecodecamp |
| https://slproweb.com/products/Win32OpenSSL.html | Openssl Windows binaries |
| Linux includes openssl ... openssl version -a ( shows details ) | |
| https://phoenixnap.com/kb/openssl-tutorial-ssl-certificates-private-keys-csrs | Tutorial creating ssl certificates with openssl |
| https://www.pixelstech.net/article/1408345768-Different-types-of-keystore-in-Java----Overview | Java Keystore types |
| https://docs.oracle.com/javase/9/tools/keytool.htm#JSWOR-GUID-5990A2E4-78E3-47B7-AE75-6D1826259549 | Java keytool for CA administration |
https://www.geotrust.com/resources/csr/apache_mod_ssl.htm openssl-create-server-cert-process-geotrust.com-Generate a Certificate Signing Request CSR.pdf | common openssl process to create a server certificate for ssl - geotrust |
https://www.thewindowsclub.com/manage-trusted-root-certificates-windows | Using Windows 10 Trust store with MMC |
Mozilla keeps the trust store in the source code repository: This file contains the object definitions for the certs and other # information "built into" NSS. | |
https://support.google.com/a/answer/6342198?hl=en | Generate Keys and Certificates for SSO for a GSuite account how to create keys, certificates and link them to a GSuite account |
Let's encrypt or other root CAs - provides certs, CAAS - certificate admin as a service using a client agent on your server Let's Encrypt has short key rotation ( 90 days or less to expiration ) | |
| https://caddyserver.com/docs/automatic-https#overview |
Caddy keeps all managed certificates renewed and redirects HTTP |
| https://upcloud.com/community/tutorials/use-ssh-keys-authentication/ | Using ssh with Openssl or Puttygen ** |
| https://security.stackexchange.com/questions/146360/ssh-keypair-works-in-putty-but-not-in-openssh-inside-the-puttys-session | Puttygen keys are not compatible with OpenSSH or OpenSSL Puttygen's private key format (PPK) can by converted OpenSSL format |
| https://serverfault.com/questions/9708/what-is-a-pem-file-and-how-does-it-differ-from-other-openssl-generated-key-file | Common certificate and key file formats |
| https://www.https.in/ssl-security/renew-ssl-certificate-steps/ ssl-How to Renew SSL Certificate for my Website.pdf | Renew SSL certificates ** |
| https://docs.aws.amazon.com/acm/index.html | AWS ACM certificate management ** |
| https://awsbytes.com/certificate-manager-cli-commands/ | AWS ACM CLI commands * |
...