PKI
System Administration
Better Secure Shell (SSH)
This post covers hardening SSH workflows by generating ed25519 and RSA key pairs, deploying public keys, and configuring an SSH client config file with per-host identity files and strong cipher settings.
System Administration
Using OpenSSL and pfSense to sign a Subordinate Windows Enterprise Certificate Authority
This post explains how to use OpenSSL on pfSense to sign a Windows Enterprise Subordinate CA certificate signing request, including the openssl.conf setup and CRL distribution requirements.