Spec

1
2
3
4
5

sudo mkdir /usr/local/etc/ssl/certs
sudo cp rootca.pem /usr/local/etc/ssl/certs/root-nasa-nycu.pem
sudo certctl rehash
certctl list | grep CSCC
curl --capath /etc/ssl/certs https://ca.nasa.nycu:9000

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

sudo pkg install -y acme.sh caddy bind-tools
sudo sysctl net.inet.ip.portrange.reservedhigh=0
/etc/sysctl.conf

mkdir ~judge/.acme.sh
sudo chmod g+w ~judge/.acme.sh

openssl s_client -connect localhost:443

curl -v --capath /etc/ssl/certs --resolve x.18.nasa.nycu:443:127.0.0.1 https://x.18.nasa.nycu