Univention UCS would be a sweet “Domain-Controller in a box” solution if there weren’t that many pitfalls like setting the NTP server correctly. That stuff is done via “ucr”, some univention tool on commandline or hidden in their registry. ucr set timeserver=”pool.ntp.org” It’s just as simple as that to stop the ActiveDirectory from acting up…

OpenSSL Cheat Sheet

Create a strong CSR and private key openssl req -new -nodes -newkey rsa:4096 -out server.crt -keyout server.key Parsing out the data within a certificate openssl asn1parse -in server.crt Checking a certificate/key modulus to see if they correspond openssl rsa -in server.key -modulus -noout | openssl md5 openssl x509 -in server.crt -modulus -noout | openssl md5 Convert a key […]