diff --git a/README.md b/README.md index 1355625..ee28098 100644 --- a/README.md +++ b/README.md @@ -4,11 +4,14 @@ This script is a wrapper around openssl to manage a small PKI. ## Install +### Debian + ~~~ -mkdir /etc/shellpki useradd shellpki --system -M --home-dir /etc/shellpki --shell /usr/sbin/nologin +mkdir /etc/shellpki install -m 0640 openssl.cnf /etc/shellpki/ install -m 0755 shellpki.sh /usr/local/sbin/shellpki +chown -R shellpki: /etc/shellpki ~~~ ~~~ @@ -16,6 +19,21 @@ install -m 0755 shellpki.sh /usr/local/sbin/shellpki %shellpki ALL = (root) /usr/local/sbin/shellpki ~~~ +### OpenBSD + +~~~ +useradd -r 1..1000 -d /etc/shellpki -s /sbin/nologin _shellpki +mkdir /etc/shellpki +install -m 0640 openssl.cnf /etc/shellpki/ +install -m 0755 shellpki.sh /usr/local/sbin/shellpki +chown -R _shellpki:_shellpki /etc/shellpki +~~~ + +~~~ +# visudo -f /etc/sudoers +%_shellpki ALL = (root) /usr/local/sbin/shellpki +~~~ + ## Usage ~~~