New answers tagged server
Like this: CA machine: ca.crt, ca.key Server: ca.crt, server.crt, server.key Clients: client.crt, client.key, ca.crt Notably, ca.key does NOT go on the server. If the server is compromised, then the attacker won't get ca.key. With easy-rsa you generate the key and certicate on the CA machine, and send them to the client. Technically you don't need to ...
Do "they" have physical access to the machine? There was an old utility called "passprop" which would lockout the local admin account from being brute forced over the network, but would still allow one to login locally with the admin credentials.
Top 50 recent answers are included