sudo rm -rf /tmp/certs/ Then you can clone this repo and run the script like this: git clone"https://github.com/nswccd-devsecops/dod-root-ca-and-cac"cd./dod-root-ca-and-cac/ ansible-playbook --ask-become-pass ./dod-root-ca-and-cac-installer.yml ...
In my case I had Firefox already configured to be able to authenticate against CAC-enabled websites, using PCSC Lite, the CACKey middleware, and by installing the DoD root certsand intermediate CA certsinto the NSS keystore. With "real" CAC sites already working, testing for me was a matt...
18. If you are being prompted for your PIN continuously when using Windows 8’s built-in smart-card utility, then you must be aware of that Windows 8’s built-in smart-card utility is deprived of the option to store your PIN (like ActivClient does). DISA (Enterprise Email) will always...
ssl.acme-location SSL_ACME_LOCATION ./var/acme dir where obtained le-certs will be stored ssl.acme-email SSL_ACME_EMAIL admin email for receiving notifications from LE max-comment MAX_COMMENT_SIZE 2048 comment's size limit max-votes MAX_VOTES -1 votes limit per comment, -1 - unlimited vo...