Projects

Certificate management

2021–2025

I developed a tool for managing an internal certificate authority, issuing certificates for OpenVPN and servers, and automatically distributing CRLs to routers.

Technicians use the tool for client OpenVPN access and server certificates. It has a text-based interface with Active Directory login, support for SANs and wildcard certificates, and automatic expiry of lapsed certificates.

A companion utility regularly generates CRLs and updates the OpenVPN servers on Ubiquiti and pfSense routers; monitoring keeps an eye on CRL age and certificate expiry.