- Buat
openssl.cnf
[req]
default_bits = 2048
distinguished_name = req_distinguished_name
req_extensions = req_ext
prompt = no
[req_distinguished_name]
C = ID
ST = Bali
L = Denpasar
O = Your Organization
OU = Your Department
CN = Your Name
emailAddress = your.email@example.com
[req_ext]
keyUsage = critical, digitalSignature, nonRepudiation
extendedKeyUsage = clientAuth, emailProtection
subjectAltName = @alt_names
[alt_names]
email = your.email@example.com- Generate key & CSR
openssl req -new -keyout my_private_key.pem -out my_certificate_request.csr -config openssl.cnf- Self-sign csr yang sudah dibuat
openssl x509 -req -days 365 -in my_certificate_request.csr -signkey my_private_key.pem -out my_certificate.pem -extensions req_ext -extfile openssl.cnf
- Verifikasi
openssl x509 -in my_certificate.pem -text -noout- Convert ke .p12
openssl pkcs12 -export -out my_certificate.p12 -inkey my_private_key.pem -in my_certificate.pemDan certificate ini bisa digunakan misal ingin membuat selfhosted digital signature dengan DocuSeal
Read more
Provisioning AWS Lambda dengan Terraform
Lanjutan belajar AWS: mengenal Lambda dan provisioning Lambda function di AWS menggunakan Terraform.
Provisioning EC2 dan RDS di AWS dengan Terraform
Catatan provisioning infrastruktur AWS pakai Terraform untuk EC2 dan RDS, mulai dari konfigurasi sampai hasil apply-nya.
AWS IAM Role, EC2 Instance Profile, dan Multi-Tier VPC
Bikin IAM role dan attach ke EC2 lewat instance profile, uji akses ke S3 dan SSM Parameter Store, lalu provisioning multi-tier VPC pakai OpenTofu.
AWS IAM Least-Privilege Policy dan VPC Networking Deep Dive
Menyusun IAM policy least-privilege dan IAM role di AWS, lalu lanjut ke networking VPC: subnet publik-privat sampai NAT Gateway.