> I still have nightmares about trying to set up SSL with nginx and my own self-managed certificates. For anyone who needs to run their own CA (which I'm now doing for my homelab), I've found that using GUI software like KeyStore explorer is a sufficiently easy and lazy way of doing that, which actually works well, both for securing regular sites, as well as doing mTLS: https://keystore-explorer.org/ > Shoutout to... - Source: Hacker News / 8 days ago

Yes, that's clear but you need the private key to create a CSR. I'm guessing since you are using a Java app you should either have a JKS (old fashioned) or a P12 (pkcs12) keystore, one of those should contain the private key, you can use keystore explorer to extract the data. Https://keystore-explorer.org/. Source: about 1 year ago

Personally, I've also had decent experiences with Keystore Explorer: https://keystore-explorer.org/ I actually wrote about using it on my blog, which has plenty of screenshots: https://blog.kronis.dev/tutorials/lets-run-our-own-ca. - Source: Hacker News / over 1 year ago

Then let me tell you about keystore explorer https://keystore-explorer.org/ which will make your life a lot easier (and less chance that there are more then 1 keys inside your keystore. Source: over 1 year ago

I... Kind of like it? Not the fact that using such a GUI would be almost impossible, like the humorous example of an "engineer oriented UI" in the Silicon Valley series https://www.reddit.com/r/SiliconValleyHBO/comments/4nvvnl/pied_pipers_easytouse_tools/ which might be confusing for most people. But rather the fact that all of the complexity the software has is laid bare, so that nobody could mistakenly assume... - Source: Hacker News / almost 2 years ago

This is the answer, more detail: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks. Source: about 2 years ago

Make sure that you back-up the active app-configuration, this way you have an easier way to recover; make sure you are allowed to verify using more than an authenticator, more here. Source: about 3 years ago