Summary

With this discussion complete, you should know the basics of installing and configuring a certificate server using OpenSSL. You should also know the basic concepts needed to request a certificate and sign a certificate. The basic concepts and tools across different CA implementations remain the same. You should also have an understanding of the basic OpenSSL commands used for checking certificate material or debugging certificates on remote servers.

You should further understand the factors involved in securing your certificate infrastructure. This includes the use of CT for inventory and reconnaissance, for both defensive and offensive purposes.

In Chapter 9, RADIUS Services for Linux, we'll build on this by adding RADIUS authentication services to our Linux host. You'll see that in the more advanced configurations, RADIUS can use your certificate infrastructure to secure your wireless network, where the certificate will be used both for two-way authentication...