vagabondan

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

vagabondan

Generate ssl certificates with Subject Alt Names on OSX

Open ssl.conf in a text editor.

Edit the domain(s) listed under the [alt_names] section so that they match the local domain name you want to use for your project, e.g.

DNS.1   = my-project.dev

Additional FQDNs can be added if required:

vagabondan

Client-side SSL

For excessively paranoid client authentication.

---

Updated Apr 5 2019:

because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.

some other notes:

vagabondan

#!/usr/bin/python
# -*- coding: utf-8 -*-
"""
Zabbix SMTP Alert script for gmail.
"""

import sys
import smtplib
from email.MIMEText import MIMEText
from email.Header import Header

vagabondan

#!/usr/bin/python
# -*- coding: utf-8 -*-
"""
Zabbix SMTP Alert script for Yandex.
"""

import sys
import smtplib
import datetime
from email.MIMEText import MIMEText

vagabondan

# 1. On a internet-connected device, download the package and its dependencies to a directory
mkdir pip-es-curator
pip install --ignore-installed -d ./pip-es-curator elasticsearch-curator

# 2. Move the directory containing the packages to the offline device
# 3. On the offline device, install the package from the transferred directory
pip install --no-index --find-links ./pip-es-curator elasticsearch-curator