Badr Ibrahim Badrmoh

GPG - SSH setup

Generating the master key

Here we create the master key. We want only Certify capability: we use the master key only to create the subkeys, Sign - Encrypt - Authenticate capabilities will be assigned to the subkeys.

Run the following command to start the master key generation process. Select the set your own capabilities creation process (type 8)

  ▶ gpg --full-generate-key --expert

gpg-agent setup

Need to setup gpg-agent first, on OSX I use keychain (it also does ssh-agent)

$ brew info keychain
keychain: stable 2.8.5
User-friendly front-end to ssh-agent(1)
https://www.funtoo.org/Keychain
/usr/local/Cellar/keychain/2.8.5 (7 files, 108.5KB) *

Every so often I have to restore my gpg keys and I'm never sure how best to do it. So, I've spent some time playing around with the various ways to export/import (backup/restore) keys.

Method 1

Backup the public and secret keyrings and trust database

cp ~/.gnupg/pubring.gpg /path/to/backups/
cp ~/.gnupg/secring.gpg /path/to/backups/
cp ~/.gnupg/trustdb.gpg /path/to/backups/

or, instead of backing up trustdb...

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

A bunch of good git tutorials

Intro to git

Simplest intro to git by github and codeschool - Try Git
PeepCode Git Internals PDF
[Intro to github]

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

	{
	"title": "Apache logs",
	"services": {
	"query": {
	"list": {
	"0": {
	"query": "*",
	"alias": "",
	"color": "#7EB26D",
	"id": 0,

	import org.sonatype.nexus.common.entity.*
	import org.sonatype.nexus.security.*
	import org.sonatype.nexus.security.authz.*
	import org.sonatype.nexus.selector.*

	import com.google.common.collect.ImmutableMap

	// use container.lookup to fetch internal APIs we need to use
	def selectorManager = container.lookup(SelectorManager.class.name)
	def securitySystem = container.lookup(SecuritySystem.class.name)