SSL / ACME

Installing on arch

pacman -S caddy
pacman -S acme.sh socat

adding certs to trust db

trust anchor --store internal.root.crt 
trust anchor --remove internal.root.crt

Useful openssl cmds

openssl x509 -text -noout -in foo.crt
openssl s_client -connect acme.smex.lan:443

Setting up our custom PKI

	pki {
		ca smex {
			name                  "Smex Inc"
#			root_cn               <name>
#			intermediate_cn       <name>
#			intermediate_lifetime <duration>
			# if using own custom signed cert, e.g. if you already have an internal CA and want to use certs signed by it
#			root {
#				format <format>
#				cert   <path>
#				key    <path>
#			}
#			intermediate {
#				format <format>
#				cert   <path>
#				key    <path>
#			}
		}
	}