Andyes,justbaskintheorangeglowforamomentasyoucongratulateyourself
on having reached the end of this module,
a really great module where you should have taken on
board a huge amount of information.
We've implemented a certificate authority.
Just think about that, you have done it.
We've trusted our x509 certificate on all of our clients,
the AlmaLinux system and on our Ubuntu system. We were
protecting our certificate authority with both a password and
file system security. If you remember,
we created the directory with the ‑m for the mode. On the
Apache web server, which was running on Ubuntu, we created
our certificate signing request.
We had that sent through to our certificate authority, and on the CA were
able to sign the request and send it back to the client.
Of course,
once it was back on the client we could configure the rest of our HTTPS
server, and we were able to see that we were able to access our website
without the warnings of a self‑signed certificate.
So really, a huge amount that we've achieved here. So you really
do need to just think a little bit about what you've achieved
and how quickly we are progressing.
Congratulations! And I really mean that.
But don't worry, we're not finished,
not by a long chalk. In our next module, we're going to be taking a look at
implementing identity management with OpenLDAP and SSSD. I look forward to seeing you within that module