diff --git a/README.md b/README.md index 0025971..2aef4d2 100644 --- a/README.md +++ b/README.md @@ -50,9 +50,45 @@ Main Features Installation -------------- -BounCA is Django / Python3 based, and it is recommended to deploy BounCA to its own linux environment, like a virtual machine.. Note that it is best practice to create the root pair in a secure environment. Ideally, this should be on a fully encrypted, air gapped computer that is permanently isolated from the Internet. -More info about the installation: [BounCA Installation Tutorials](https://www.bounca.org/getting-started.html) +BounCA is a Django application running on a Python3 environment. +While it is highly portable setup, we suggest you deploy a (virtual) machine with the following configuration: + +* Debian Jessie Linux +* Key authentication for the Root user + +Ansible offers the easiest way of creating a BounCA deployment for hosting your Certificate Authority. + +You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansible installation. +Create your playbook ``install-bounca.yml``: + + - hosts: all + remote_user: root + roles: + - { role: repleo.bounca, + bounca_timezone: /usr/share/zoneinfo/Europe/Amsterdam, + bounca_db_user: bounca, + bounca_db_password: , + bounca_db_host: localhost, + bounca_db_name: bouncadb, + + bounca_secret_key: , + bounca_email_host: localhost, + bounca_admin_mail: bounca-admin@, + bounca_from_mail: no-reply@ + } + + +Ansible will install the database, webserver and so on. The parameters you provide in the playbook are used to instantiate the services. +After you created the playbook, you can install BounCA by executing the following commands: + + ansible-galaxy install repleo.bounca -p ./roles + ansible-playbook install-bounca.yml -i , + +The first collects the ansible roles from Ansible's galaxy. +The second command installs the actual BounCA system. + +More installation options, such as docker and manual: [BounCA Installation Tutorials](https://www.bounca.org/getting-started.html) Requirements ------------------ diff --git a/bounca/static/docs/_sources/getting_started.txt b/bounca/static/docs/_sources/getting_started.txt index 77bd25e..6b7d388 100644 --- a/bounca/static/docs/_sources/getting_started.txt +++ b/bounca/static/docs/_sources/getting_started.txt @@ -27,7 +27,7 @@ Ansible Deployment `Ansible`_ offers the easiest way of creating a BounCA deployment for hosting your Certificate Authority. -You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansbile installation. +You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansible installation. Create your playbook ``install-bounca.yml``: .. code-block:: yaml diff --git a/bounca/static/docs/getting_started.html b/bounca/static/docs/getting_started.html index dd6ae13..ffedcf2 100644 --- a/bounca/static/docs/getting_started.html +++ b/bounca/static/docs/getting_started.html @@ -170,7 +170,7 @@

Prepare your Environment

Ansible DeploymentΒΆ

Ansible offers the easiest way of creating a BounCA deployment for hosting your Certificate Authority.

-

You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansbile installation. +

You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansible installation. Create your playbook install-bounca.yml:

- hosts: all
   remote_user: root
diff --git a/bounca/static/docs/searchindex.js b/bounca/static/docs/searchindex.js
index 4fb96a0..0d82b29 100644
--- a/bounca/static/docs/searchindex.js
+++ b/bounca/static/docs/searchindex.js
@@ -1 +1 @@
-Search.setIndex({envversion:48,filenames:["contribution","features","getting_started","index","ssl/appendix","ssl/certificate_revocation_list","ssl/intermediate_pair","ssl/intro","ssl/online_certificate_status_protocol","ssl/root_pair","ssl/sign_server_client_certificates","support"],objects:{},objnames:{},objtypes:{},terms:{"0x0":8,"150411125310z":5,"160420124233z":10,"160420124740z":5,"250408122707z":6,"69e8ec547f252360e5b6e77261f1d4b921d445e9":8,"_build_html":[],"case":[1,2,5,6,7,8],"default":[4,5,9],"function":8,"import":1,"long":9,"new":[5,6,8,9,10],"public":[9,10],"static":2,"true":[2,4,9],"try":2,"var":2,"while":2,abil:2,abl:[5,9],about:[3,5,6,8,9,10,11],absolut:9,accept:[],access:[1,2,3,5,7,10],account:[1,2],act:[7,8,9],action:11,actual:[2,11],add:[4,5,6,9],address:[4,5,6,8,9,10,11],admin:2,admin_mail:2,administr:[3,6],aes256:[6,8,9,10],after:[2,5,9,10],again:1,against:[5,6],air:9,algorithm:[8,9,10],alic:[4,5,6,8,9,10],all:[1,2,3,9,11],allow:[1,4,7,9],alreadi:[],also:[1,3,6,9,10],altern:8,although:10,alwai:[4,9],amsterdam:2,ani:[5,9,10],anoth:8,ansbil:2,answer:11,anyon:9,apach:[1,5,10],api:[1,7],app:2,appendix:[],appli:9,applic:[1,2,5,6,7,10],appropri:[5,8],apr:[8,9,10],argument:[2,3,9],arnoldu:0,ask:[5,6,8,9,10,11],assum:[],attack:[1,7],author:[],authorityinfoaccess:8,authoritykeyidentifi:[4,9],auto:[],autobuild:[],automat:9,avail:[3,10],back:10,bare:[],base:[0,1,3,5,7,8],basic:[8,10],basicconstraint:[4,9],beauti:[],becaus:6,becom:9,been:[5,6],befor:[1,8,9,10],begin:5,behalf:[6,9],belong:1,below:[9,10],best:[9,11],better:6,beyond:8,bit:[6,9,10],block:[2,5,9],bob:5,bounca:[],bounca_admin_mail:2,bounca_db_host:2,bounca_db_nam:2,bounca_db_password:2,bounca_db_us:2,bounca_email_host:2,bounca_from_mail:2,bounca_secret_kei:2,bounca_timezon:2,bouncadb:2,brows:2,browser:[5,6,8],build:[],ca_default:[4,5,6,9],cafil:[5,6,8,10],california:[5,10],call:1,can:[1,2,5,6,8,9,10,11],cannot:[1,2,10],card:9,care:1,cat:6,central:3,cert:[4,5,6,8,9,10],cert_opt:[4,9],certif:[],certifi:5,certificate_signing_request:[4,9],chain:[],chang:[2,6],charact:5,charset:2,chdir:2,check:[1,5,6,8],chmod:[2,6,9,10],choos:[6,9],chose:9,chown:2,claim:5,clientauth:[4,9],clone:2,cloud:[1,7],cnf:[4,5,6,8,9,10],code:[3,4,6,8,9,10],collect:[2,5],collectstat:2,com:[2,5,8,10],comma:2,comment:10,commit:5,common:[4,5,6,7,8,9,10],commonnam:[4,9],commun:7,compar:6,complet:[1,6],complex:1,compos:2,compromis:[6,9],comput:9,concaten:6,conf:[],config:[2,5,6,8,9,10],configur:[],consist:9,constraint:10,content:5,control:5,conveni:[6,10],cool:2,copi:[1,4,5,6,9],correct:[1,6,8],correspond:[5,10],countri:[4,5,6,8,9,10],countrynam:[4,9],countryname_default:[4,9],coupl:[2,3],critic:[4,8,9,10],crl_dir:[4,9],crl_ext:[4,9],crl_extens:[4,9],crldistributionpoint:[5,8],crlnumber:[4,6,9],crlsign:[4,9],cryptograph:[6,8,9,10],csr:[1,5,6,8,10],current:1,custom:[2,7],cute:5,dai:[5,6,8,9,10],dashboard:1,data:[2,5,8],databas:[1,2,4,6,9],database_host:2,database_nam:2,database_password:2,database_us:2,deal:9,debian:2,declar:9,default_bit:[4,9],default_ca:[4,9],default_crl_dai:[4,5,9],default_dai:[4,9],default_md:[4,9],delet:6,deni:5,depend:2,deploi:[],deprec:[4,5,8,9],detail:[5,6,8,10],determin:8,devic:1,did:6,differ:[1,6],digicert:7,digit:[7,8,10],digitalsignatur:[4,9],dir:[4,6,9],direct:5,directli:[8,9],directori:[],dirnam:10,disastr:9,distinguished_nam:[4,9],distribut:[1,5,10],divers:4,django:2,doc:1,document:[],doe:[1,9],domain:[1,7,8,10],don:[2,10],done:[],down:10,dure:10,e35979b6d0a973ebe8aeded75d8c27d67d2a0334:8,earlier:[9,10],easi:[1,3],easiest:2,easili:1,echo:[6,9],edit:6,effort:11,either:10,elsewher:1,email:[2,4,5,6,8,9,10],email_host:2,emailaddress:[4,9],emailaddress_default:[4,9],emailprotect:[4,9],enabl:[1,8],encipher:10,encod:[5,8],england:[4,6,8,9,10],enough:1,ensur:9,enter:[5,6,8,9,10],entiti:[6,7,9],entri:5,env:2,etc:[2,9],ethernet:9,europ:2,ever:9,everi:[1,6,10],exampl:[2,5,8,9,10],excel:0,execut:2,exist:8,expect:11,expiri:9,extend:[8,10],extendedkeyusag:[4,9],extens:[4,5,6,8,9,10],extra:10,fals:[4,9,10],fastest:2,fetch:5,few:[9,10],file:[],fill:9,find:5,finish:2,first:[2,9],five:6,flat:9,folder:[1,5],follow:[2,10],forget:2,form:[6,9],format:[4,9],francisco:5,fresh:2,friend:5,from_mail:2,full:5,fulli:[8,9,10],further:9,gain:5,galaxi:2,gap:9,gencrl:5,gener:[1,2,4,6,8,9,10],genrsa:[5,6,8,9,10],gid:2,github:[2,3,11],give:[9,10],given:10,glue:9,gmt:[8,9,10],good:8,grant:[1,5],guarante:11,guid:[0,8],hacker:5,had:5,hand:6,handshak:10,hash:[4,8,9],hassl:[1,3],have:[1,2,5,6,7,8,10,11],heart:5,help:11,her:5,here:[1,9],highli:2,hold:6,home:[2,5],host:[1,2],hostname_or_ip:2,how:[2,5,11],howev:[6,8,10],html:[],http:[2,4,5,7,8,9],huge:5,hurrai:5,ideal:9,ident:[8,9],identifi:10,immedi:5,includ:[1,2,5,6,7,8,11],incorpor:[5,6,8,9,10],increas:10,index:[4,5,6,8,9,10],indic:6,inform:[5,6,8,9,10,11],infrastructur:3,infrequ:6,ini:2,insid:[],inspect:1,instanti:2,instead:[4,5,8,9,10],intact:6,intend:8,interfac:[1,3],intern:[1,2,7],internation:7,internet:[1,7,9],interv:5,intranet:[1,6,7],invalid:9,iot:7,isn:11,isol:9,issu:[],issuer:[4,8,9,10],itself:[9,10],jeroen:0,jessi:2,just:[1,2],kept:[6,9],keycertsign:[4,9],keyencipher:[4,9],keyid:[4,9,10],keyusag:[4,9],kind:11,kitten:5,know:[3,6,7],last:2,later:6,length:9,let:[5,7],letter:[4,6,8,9,10],level:1,like:[2,7],liner:2,linux:2,listen:[2,8],load:[2,10],local:[2,4,5,6,8,9,10],localhost:[2,8],localitynam:[4,9],localityname_default:[4,9],locat:[2,4,5,8,9],log:2,login:[2,7],logto:2,longer:5,look:2,ltd:[4,5,6,8,9,10],machin:2,mai:[1,7,10],mail:[1,10,11],main:[2,3,7],make:[2,6,7,9,10],man:[1,4,5,7,9],mandatori:9,mani:7,master:2,match:[4,6,8,9,10],mean:[5,8,9],meant:2,media:2,meltingli:5,micro:7,middl:[1,7],might:2,migrat:2,mime:2,minut:[2,3],misbehav:5,mkdir:[6,9],modul:2,more:[4,5,7,9,10],most:10,mountain:10,much:[9,11],multipl:1,must:[5,6,8,9,10],name_opt:[4,9],need:[2,5,6,7,8,10],netscap:10,network:[1,7],never:1,new_certs_dir:[4,9],newcert:[4,6,9],next:[2,5,9],nginx:[1,2],noinput:2,nonrepudi:[4,9],noout:[5,6,8,9,10],normal:[5,9,10],note:[9,10],notext:[5,6,8,10],now:[5,6,10],nrequest:8,nscerttyp:[4,9],nscomment:[4,9],number:8,ocsp:[],ocspsign:[4,9],offer:[1,2],offlin:[6,9],omit:10,onc:9,onli:[1,2,4,6,8,9,10],onlin:[],open:3,openssl:[0,1,3,4,5,6,8,9,10],openvpn:[1,5,7],option:[4,5,6,8,9,10],org:[2,4,9],organ:[3,4,5,6,8,9,10],organiz:[4,5,6,8,9,10],organizationalunitnam:[4,9],organizationalunitname_default:[4,9],organizationnam:[4,9],organizationname_default:[4,9],other:1,otherwis:9,our:[5,6,8,10,11],out:[5,6,8,9,10],output:[5,8,9,10],over:1,page:[1,4,5],pai:7,pair:[],paramet:2,parti:[5,8,10],particular:1,particularli:6,pass:[5,6,8,9,10],password:[2,6,9,10],path:[],pathlen:[4,9],peer:[1,7],pem:[4,5,6,8,9,10],peopl:11,perform:5,period:6,perman:9,persist:2,person:3,perspect:10,phrase:[5,6,8,9,10],pictur:5,pip3:2,pip:[],pkcs12:1,place:[1,11],placehold:2,playbook:2,pleas:[1,2,11],point:5,polici:[4,6,9],policy_loos:[4,6],policy_strict:[4,9],popular:5,port:[8,9],portabl:2,possess:9,possibl:[6,8,9,11],postgresql:2,practic:9,prefer:[],prepackag:1,prerequisit:2,present:[6,8],preserv:[4,9],press:1,prevent:7,primarili:6,privat:[1,4,5,6,7,8,9,10],private_kei:[4,6,9],process:2,processor:10,produc:8,product:8,project:[],protocol:[],provid:[2,3,5,11],provinc:[4,5,6,8,9,10],provis:1,proxypass:2,publicli:5,publish:5,purpos:6,push:[],python3:2,python:2,python_:[],qualifi:[8,10],queri:8,question:[],quick:[],quickstart:[],rand:[4,9],randfil:[4,9],random:2,rang:[4,9],rather:[7,8],reach:2,read:[5,8],readi:[2,8],realist:8,reason:[6,10],rebuild:[],receiv:8,recent:2,recommend:8,recov:2,reduc:1,refer:[6,9,10],reflect:[9,10],regular:5,relat:11,releas:2,reli:5,reload:[],rememb:2,remot:[5,9],remote_us:2,remov:[8,9],repeat:11,replac:2,repleo:[0,2,4],repli:2,repo:2,repositori:[],req:[4,5,6,8,9,10],req_distinguished_nam:[4,9],request:[5,6,8,9,10],requir:[2,8,9],resp_text:8,respond:8,respons:[8,11],rest:7,restart:[2,10],restor:1,restructuredtext_:[],result:11,reveal:10,revis:[],revoc:[],right:2,risk:1,rkei:8,role:2,rsaencrypt:[9,10],rsigner:8,rst:[],run:[2,5,8],sadli:5,safe:10,salt:2,same:[6,8,10],san:5,scenario:10,scheme:7,scope:8,screen:2,screencast:[],script:[1,2],second:2,secret:[1,2],secret_kei:2,secretpassword:[5,6,8,9,10],section:[3,4,5,8,9,10],secur:[6,7,9,10],see:[2,4,9],self:[2,9],send:[5,8],sens:7,separ:8,serial:[4,6,8,9,10],serv:1,server_cert:[4,5,8,9,10],server_nam:2,serverauth:[4,9],servic:[1,2,7,10],setup:2,sha1:8,sha256:[4,5,6,8,9,10],sha256withrsaencrypt:[9,10],sha:[4,9],share:2,she:5,shell:[1,9],shorter:[6,9],should:[2,4,5,6,8,9,10],show:[1,2,8,9,10],sign:[],signatur:[8,9,10],significantli:10,signign:1,similar:8,similarli:5,simpli:1,sing:2,singl:2,situat:10,skip:10,slightli:10,slow:10,snip:[5,8],socket:2,solv:11,some:[1,4,5,7,8,9],soon:11,sourc:3,specif:2,specifi:[4,5,6,8,9],sphinx:[],sphinx_:[],srv:2,ssl:[0,3,10],sslcarevocationpath:5,state:[4,5,6,8,9,10],stateorprovincenam:[4,9],stateorprovincename_default:[4,9],statu:[],step:[2,10],still:9,store:[1,2,6,8,9],string:2,string_mask:[4,9],strong:[1,6,9],structur:[1,6,9],subjectkeyidentifi:[4,9],success:8,suggest:2,suppli:[4,9],sure:[2,6,9],sync:1,syntax:[],system:2,take:1,taken:11,tell:9,templat:[],ten:6,tend:8,termin:8,test:8,text:[1,5,6,8,9,10],than:[6,7,8,10],thei:[2,5,7,8,10,11],them:[2,7,10],thi:[1,2,5,6,8,9,10,11],thing:[1,7],third:[5,10],those:[8,9],though:[8,10],thread:2,three:2,through:5,time:[1,5,6,8,10,11],togeth:6,tool:[1,3,4,5,6,8,9],touch:[6,9],tracker:11,trail:2,tree:6,tri:6,turn:5,twenti:9,txt:[2,4,5,6,8,9],type:[2,8,10],typic:[1,4,5,8,9,10],uid:2,uniqu:10,unit:[4,5,6,8,9,10],unix:2,unknown:[5,6,10],unpack:2,until:[],unus:9,updat:[5,8],uri:[5,8],url:8,usag:[],user:[1,2,3,9,10],usr:2,usr_cert:[4,5,9,10],usual:10,utf8onli:[4,9],utf:2,uwsg:2,uwsgi:2,uwsgi_param:2,uwsgi_pass:2,uwsgi_read_timeout:2,uwsgi_send_timeout:2,v3_ca:[4,9],v3_ca_intermedi:9,v3_intermediate_ca:[4,6,9],vacuum:2,valu:2,varieti:10,vendor:5,veri:9,verif:5,verifi:[],verisign:7,version:8,view:10,virtual:2,virtualenv:2,visibl:5,volunt:11,wai:2,walk:5,want:[2,5,10],warn:1,web:[1,2,3,5,6,7,8,9,10],websit:[7,8,10],well:2,what:[],when:[1,2,4,5,6,8,9,10,11],whenev:9,where:[6,8],wherea:10,whether:[5,8],which:[8,9],who:5,wiki:[4,9],wikipedia:[4,9],wireless:9,work:2,would:6,written:0,wsgi:2,www:[2,10],x509:[4,5,6,8,9,10],x509_extens:[4,9],x509v3:[5,8,9,10],x509v3_config:[4,9],year:[6,9,10],yet:[5,6],yml:2,you:[1,2,5,6,8,9,10,11],your_bounca_nam:[],yourdomain:2,zip:1,zoneinfo:2},titles:["Contribution","BounCA features","Getting Started","Welcome to BounCA’s documentation!","Appendix","Certificate Revocation Lists","Create the Intermediate Pair","Your Own Certificate Authority","Online Certificate Status Protocol","Create the Root Pair","Sign Server and Client Certificates","Support"],titleterms:{"export":1,advanc:1,alt:1,ansibl:2,appendix:4,authent:1,author:[1,7],bounca:[1,3],bug:11,button:1,calendar:1,certif:[1,5,6,7,8,9,10],chain:6,click:1,client:[1,5,10],command:1,configur:[4,5,8,9],connect:1,contain:1,contribut:0,creat:[1,5,6,8,9,10],crl:[1,5],date:1,deploi:10,deploy:2,directori:[6,9],docker:2,document:3,download:1,encrypt:1,environ:2,evalu:1,expir:1,extern:0,featur:1,file:[4,5,6,8,9],from:1,get:2,group:1,ical:1,info:1,instal:[1,2],intermedi:[1,4,6],issu:11,keep:1,kei:[1,6,9,10],keystor:1,line:1,list:[1,5],maintain:0,manag:1,manual:2,mous:1,name:1,ocsp:8,onlin:8,own:[1,7],packag:1,pair:[6,8,9],passphras:1,pki:1,post:2,prepar:[2,5,6,8,9],protect:1,protocol:8,question:11,report:11,resourc:0,revoc:5,revok:[1,5,8],root:[1,4,9],server:[1,5,10],set:1,side:[1,5],sign:10,start:2,statu:8,subject:1,support:[1,11],track:1,trust:1,usag:11,valid:1,verifi:[6,9,10],via:1,webinterfac:1,webserv:1,welcom:3,within:1,without:1,your:[1,2,7]}})
\ No newline at end of file
+Search.setIndex({envversion:48,filenames:["contribution","features","getting_started","index","ssl/appendix","ssl/certificate_revocation_list","ssl/intermediate_pair","ssl/intro","ssl/online_certificate_status_protocol","ssl/root_pair","ssl/sign_server_client_certificates","support"],objects:{},objnames:{},objtypes:{},terms:{"0x0":8,"150411125310z":5,"160420124233z":10,"160420124740z":5,"250408122707z":6,"69e8ec547f252360e5b6e77261f1d4b921d445e9":8,"_build_html":[],"case":[1,2,5,6,7,8],"default":[4,5,9],"function":8,"import":1,"long":9,"new":[5,6,8,9,10],"public":[9,10],"static":2,"true":[2,4,9],"try":2,"var":2,"while":2,abil:2,abl:[5,9],about:[3,5,6,8,9,10,11],absolut:9,accept:[],access:[1,2,3,5,7,10],account:[1,2],act:[7,8,9],action:11,actual:[2,11],add:[4,5,6,9],address:[4,5,6,8,9,10,11],admin:2,admin_mail:2,administr:[3,6],aes256:[6,8,9,10],after:[2,5,9,10],again:1,against:[5,6],air:9,algorithm:[8,9,10],alic:[4,5,6,8,9,10],all:[1,2,3,9,11],allow:[1,4,7,9],alreadi:[],also:[1,3,6,9,10],altern:8,although:10,alwai:[4,9],amsterdam:2,ani:[5,9,10],anoth:8,ansbil:[],answer:11,anyon:9,apach:[1,5,10],api:[1,7],app:2,appendix:[],appli:9,applic:[1,2,5,6,7,10],appropri:[5,8],apr:[8,9,10],argument:[2,3,9],arnoldu:0,ask:[5,6,8,9,10,11],assum:[],attack:[1,7],author:[],authorityinfoaccess:8,authoritykeyidentifi:[4,9],auto:[],autobuild:[],automat:9,avail:[3,10],back:10,bare:[],base:[0,1,3,5,7,8],basic:[8,10],basicconstraint:[4,9],beauti:[],becaus:6,becom:9,been:[5,6],befor:[1,8,9,10],begin:5,behalf:[6,9],belong:1,below:[9,10],best:[9,11],better:6,beyond:8,bit:[6,9,10],block:[2,5,9],bob:5,bounca:[],bounca_admin_mail:2,bounca_db_host:2,bounca_db_nam:2,bounca_db_password:2,bounca_db_us:2,bounca_email_host:2,bounca_from_mail:2,bounca_secret_kei:2,bounca_timezon:2,bouncadb:2,brows:2,browser:[5,6,8],build:[],ca_default:[4,5,6,9],cafil:[5,6,8,10],california:[5,10],call:1,can:[1,2,5,6,8,9,10,11],cannot:[1,2,10],card:9,care:1,cat:6,central:3,cert:[4,5,6,8,9,10],cert_opt:[4,9],certif:[],certifi:5,certificate_signing_request:[4,9],chain:[],chang:[2,6],charact:5,charset:2,chdir:2,check:[1,5,6,8],chmod:[2,6,9,10],choos:[6,9],chose:9,chown:2,claim:5,clientauth:[4,9],clone:2,cloud:[1,7],cnf:[4,5,6,8,9,10],code:[3,4,6,8,9,10],collect:[2,5],collectstat:2,com:[2,5,8,10],comma:2,comment:10,commit:5,common:[4,5,6,7,8,9,10],commonnam:[4,9],commun:7,compar:6,complet:[1,6],complex:1,compos:2,compromis:[6,9],comput:9,concaten:6,conf:[],config:[2,5,6,8,9,10],configur:[],consist:9,constraint:10,content:5,control:5,conveni:[6,10],cool:2,copi:[1,4,5,6,9],correct:[1,6,8],correspond:[5,10],countri:[4,5,6,8,9,10],countrynam:[4,9],countryname_default:[4,9],coupl:[2,3],critic:[4,8,9,10],crl_dir:[4,9],crl_ext:[4,9],crl_extens:[4,9],crldistributionpoint:[5,8],crlnumber:[4,6,9],crlsign:[4,9],cryptograph:[6,8,9,10],csr:[1,5,6,8,10],current:1,custom:[2,7],cute:5,dai:[5,6,8,9,10],dashboard:1,data:[2,5,8],databas:[1,2,4,6,9],database_host:2,database_nam:2,database_password:2,database_us:2,deal:9,debian:2,declar:9,default_bit:[4,9],default_ca:[4,9],default_crl_dai:[4,5,9],default_dai:[4,9],default_md:[4,9],delet:6,deni:5,depend:2,deploi:[],deprec:[4,5,8,9],detail:[5,6,8,10],determin:8,devic:1,did:6,differ:[1,6],digicert:7,digit:[7,8,10],digitalsignatur:[4,9],dir:[4,6,9],direct:5,directli:[8,9],directori:[],dirnam:10,disastr:9,distinguished_nam:[4,9],distribut:[1,5,10],divers:4,django:2,doc:1,document:[],doe:[1,9],domain:[1,7,8,10],don:[2,10],done:[],down:10,dure:10,e35979b6d0a973ebe8aeded75d8c27d67d2a0334:8,earlier:[9,10],easi:[1,3],easiest:2,easili:1,echo:[6,9],edit:6,effort:11,either:10,elsewher:1,email:[2,4,5,6,8,9,10],email_host:2,emailaddress:[4,9],emailaddress_default:[4,9],emailprotect:[4,9],enabl:[1,8],encipher:10,encod:[5,8],england:[4,6,8,9,10],enough:1,ensur:9,enter:[5,6,8,9,10],entiti:[6,7,9],entri:5,env:2,etc:[2,9],ethernet:9,europ:2,ever:9,everi:[1,6,10],exampl:[2,5,8,9,10],excel:0,execut:2,exist:8,expect:11,expiri:9,extend:[8,10],extendedkeyusag:[4,9],extens:[4,5,6,8,9,10],extra:10,fals:[4,9,10],fastest:2,fetch:5,few:[9,10],file:[],fill:9,find:5,finish:2,first:[2,9],five:6,flat:9,folder:[1,5],follow:[2,10],forget:2,form:[6,9],format:[4,9],francisco:5,fresh:2,friend:5,from_mail:2,full:5,fulli:[8,9,10],further:9,gain:5,galaxi:2,gap:9,gencrl:5,gener:[1,2,4,6,8,9,10],genrsa:[5,6,8,9,10],gid:2,github:[2,3,11],give:[9,10],given:10,glue:9,gmt:[8,9,10],good:8,grant:[1,5],guarante:11,guid:[0,8],hacker:5,had:5,hand:6,handshak:10,hash:[4,8,9],hassl:[1,3],have:[1,2,5,6,7,8,10,11],heart:5,help:11,her:5,here:[1,9],highli:2,hold:6,home:[2,5],host:[1,2],hostname_or_ip:2,how:[2,5,11],howev:[6,8,10],html:[],http:[2,4,5,7,8,9],huge:5,hurrai:5,ideal:9,ident:[8,9],identifi:10,immedi:5,includ:[1,2,5,6,7,8,11],incorpor:[5,6,8,9,10],increas:10,index:[4,5,6,8,9,10],indic:6,inform:[5,6,8,9,10,11],infrastructur:3,infrequ:6,ini:2,insid:[],inspect:1,instanti:2,instead:[4,5,8,9,10],intact:6,intend:8,interfac:[1,3],intern:[1,2,7],internation:7,internet:[1,7,9],interv:5,intranet:[1,6,7],invalid:9,iot:7,isn:11,isol:9,issu:[],issuer:[4,8,9,10],itself:[9,10],jeroen:0,jessi:2,just:[1,2],kept:[6,9],keycertsign:[4,9],keyencipher:[4,9],keyid:[4,9,10],keyusag:[4,9],kind:11,kitten:5,know:[3,6,7],last:2,later:6,length:9,let:[5,7],letter:[4,6,8,9,10],level:1,like:[2,7],liner:2,linux:2,listen:[2,8],load:[2,10],local:[2,4,5,6,8,9,10],localhost:[2,8],localitynam:[4,9],localityname_default:[4,9],locat:[2,4,5,8,9],log:2,login:[2,7],logto:2,longer:5,look:2,ltd:[4,5,6,8,9,10],machin:2,mai:[1,7,10],mail:[1,10,11],main:[2,3,7],make:[2,6,7,9,10],man:[1,4,5,7,9],mandatori:9,mani:7,master:2,match:[4,6,8,9,10],mean:[5,8,9],meant:2,media:2,meltingli:5,micro:7,middl:[1,7],might:2,migrat:2,mime:2,minut:[2,3],misbehav:5,mkdir:[6,9],modul:2,more:[4,5,7,9,10],most:10,mountain:10,much:[9,11],multipl:1,must:[5,6,8,9,10],name_opt:[4,9],need:[2,5,6,7,8,10],netscap:10,network:[1,7],never:1,new_certs_dir:[4,9],newcert:[4,6,9],next:[2,5,9],nginx:[1,2],noinput:2,nonrepudi:[4,9],noout:[5,6,8,9,10],normal:[5,9,10],note:[9,10],notext:[5,6,8,10],now:[5,6,10],nrequest:8,nscerttyp:[4,9],nscomment:[4,9],number:8,ocsp:[],ocspsign:[4,9],offer:[1,2],offlin:[6,9],omit:10,onc:9,onli:[1,2,4,6,8,9,10],onlin:[],open:3,openssl:[0,1,3,4,5,6,8,9,10],openvpn:[1,5,7],option:[4,5,6,8,9,10],org:[2,4,9],organ:[3,4,5,6,8,9,10],organiz:[4,5,6,8,9,10],organizationalunitnam:[4,9],organizationalunitname_default:[4,9],organizationnam:[4,9],organizationname_default:[4,9],other:1,otherwis:9,our:[5,6,8,10,11],out:[5,6,8,9,10],output:[5,8,9,10],over:1,page:[1,4,5],pai:7,pair:[],paramet:2,parti:[5,8,10],particular:1,particularli:6,pass:[5,6,8,9,10],password:[2,6,9,10],path:[],pathlen:[4,9],peer:[1,7],pem:[4,5,6,8,9,10],peopl:11,perform:5,period:6,perman:9,persist:2,person:3,perspect:10,phrase:[5,6,8,9,10],pictur:5,pip3:2,pip:[],pkcs12:1,place:[1,11],placehold:2,playbook:2,pleas:[1,2,11],point:5,polici:[4,6,9],policy_loos:[4,6],policy_strict:[4,9],popular:5,port:[8,9],portabl:2,possess:9,possibl:[6,8,9,11],postgresql:2,practic:9,prefer:[],prepackag:1,prerequisit:2,present:[6,8],preserv:[4,9],press:1,prevent:7,primarili:6,privat:[1,4,5,6,7,8,9,10],private_kei:[4,6,9],process:2,processor:10,produc:8,product:8,project:[],protocol:[],provid:[2,3,5,11],provinc:[4,5,6,8,9,10],provis:1,proxypass:2,publicli:5,publish:5,purpos:6,push:[],python3:2,python:2,python_:[],qualifi:[8,10],queri:8,question:[],quick:[],quickstart:[],rand:[4,9],randfil:[4,9],random:2,rang:[4,9],rather:[7,8],reach:2,read:[5,8],readi:[2,8],realist:8,reason:[6,10],rebuild:[],receiv:8,recent:2,recommend:8,recov:2,reduc:1,refer:[6,9,10],reflect:[9,10],regular:5,relat:11,releas:2,reli:5,reload:[],rememb:2,remot:[5,9],remote_us:2,remov:[8,9],repeat:11,replac:2,repleo:[0,2,4],repli:2,repo:2,repositori:[],req:[4,5,6,8,9,10],req_distinguished_nam:[4,9],request:[5,6,8,9,10],requir:[2,8,9],resp_text:8,respond:8,respons:[8,11],rest:7,restart:[2,10],restor:1,restructuredtext_:[],result:11,reveal:10,revis:[],revoc:[],right:2,risk:1,rkei:8,role:2,rsaencrypt:[9,10],rsigner:8,rst:[],run:[2,5,8],sadli:5,safe:10,salt:2,same:[6,8,10],san:5,scenario:10,scheme:7,scope:8,screen:2,screencast:[],script:[1,2],second:2,secret:[1,2],secret_kei:2,secretpassword:[5,6,8,9,10],section:[3,4,5,8,9,10],secur:[6,7,9,10],see:[2,4,9],self:[2,9],send:[5,8],sens:7,separ:8,serial:[4,6,8,9,10],serv:1,server_cert:[4,5,8,9,10],server_nam:2,serverauth:[4,9],servic:[1,2,7,10],setup:2,sha1:8,sha256:[4,5,6,8,9,10],sha256withrsaencrypt:[9,10],sha:[4,9],share:2,she:5,shell:[1,9],shorter:[6,9],should:[2,4,5,6,8,9,10],show:[1,2,8,9,10],sign:[],signatur:[8,9,10],significantli:10,signign:1,similar:8,similarli:5,simpli:1,sing:2,singl:2,situat:10,skip:10,slightli:10,slow:10,snip:[5,8],socket:2,solv:11,some:[1,4,5,7,8,9],soon:11,sourc:3,specif:2,specifi:[4,5,6,8,9],sphinx:[],sphinx_:[],srv:2,ssl:[0,3,10],sslcarevocationpath:5,state:[4,5,6,8,9,10],stateorprovincenam:[4,9],stateorprovincename_default:[4,9],statu:[],step:[2,10],still:9,store:[1,2,6,8,9],string:2,string_mask:[4,9],strong:[1,6,9],structur:[1,6,9],subjectkeyidentifi:[4,9],success:8,suggest:2,suppli:[4,9],sure:[2,6,9],sync:1,syntax:[],system:2,take:1,taken:11,tell:9,templat:[],ten:6,tend:8,termin:8,test:8,text:[1,5,6,8,9,10],than:[6,7,8,10],thei:[2,5,7,8,10,11],them:[2,7,10],thi:[1,2,5,6,8,9,10,11],thing:[1,7],third:[5,10],those:[8,9],though:[8,10],thread:2,three:2,through:5,time:[1,5,6,8,10,11],togeth:6,tool:[1,3,4,5,6,8,9],touch:[6,9],tracker:11,trail:2,tree:6,tri:6,turn:5,twenti:9,txt:[2,4,5,6,8,9],type:[2,8,10],typic:[1,4,5,8,9,10],uid:2,uniqu:10,unit:[4,5,6,8,9,10],unix:2,unknown:[5,6,10],unpack:2,until:[],unus:9,updat:[5,8],uri:[5,8],url:8,usag:[],user:[1,2,3,9,10],usr:2,usr_cert:[4,5,9,10],usual:10,utf8onli:[4,9],utf:2,uwsg:2,uwsgi:2,uwsgi_param:2,uwsgi_pass:2,uwsgi_read_timeout:2,uwsgi_send_timeout:2,v3_ca:[4,9],v3_ca_intermedi:9,v3_intermediate_ca:[4,6,9],vacuum:2,valu:2,varieti:10,vendor:5,veri:9,verif:5,verifi:[],verisign:7,version:8,view:10,virtual:2,virtualenv:2,visibl:5,volunt:11,wai:2,walk:5,want:[2,5,10],warn:1,web:[1,2,3,5,6,7,8,9,10],websit:[7,8,10],well:2,what:[],when:[1,2,4,5,6,8,9,10,11],whenev:9,where:[6,8],wherea:10,whether:[5,8],which:[8,9],who:5,wiki:[4,9],wikipedia:[4,9],wireless:9,work:2,would:6,written:0,wsgi:2,www:[2,10],x509:[4,5,6,8,9,10],x509_extens:[4,9],x509v3:[5,8,9,10],x509v3_config:[4,9],year:[6,9,10],yet:[5,6],yml:2,you:[1,2,5,6,8,9,10,11],your_bounca_nam:[],yourdomain:2,zip:1,zoneinfo:2},titles:["Contribution","BounCA features","Getting Started","Welcome to BounCA’s documentation!","Appendix","Certificate Revocation Lists","Create the Intermediate Pair","Your Own Certificate Authority","Online Certificate Status Protocol","Create the Root Pair","Sign Server and Client Certificates","Support"],titleterms:{"export":1,advanc:1,alt:1,ansibl:2,appendix:4,authent:1,author:[1,7],bounca:[1,3],bug:11,button:1,calendar:1,certif:[1,5,6,7,8,9,10],chain:6,click:1,client:[1,5,10],command:1,configur:[4,5,8,9],connect:1,contain:1,contribut:0,creat:[1,5,6,8,9,10],crl:[1,5],date:1,deploi:10,deploy:2,directori:[6,9],docker:2,document:3,download:1,encrypt:1,environ:2,evalu:1,expir:1,extern:0,featur:1,file:[4,5,6,8,9],from:1,get:2,group:1,ical:1,info:1,instal:[1,2],intermedi:[1,4,6],issu:11,keep:1,kei:[1,6,9,10],keystor:1,line:1,list:[1,5],maintain:0,manag:1,manual:2,mous:1,name:1,ocsp:8,onlin:8,own:[1,7],packag:1,pair:[6,8,9],passphras:1,pki:1,post:2,prepar:[2,5,6,8,9],protect:1,protocol:8,question:11,report:11,resourc:0,revoc:5,revok:[1,5,8],root:[1,4,9],server:[1,5,10],set:1,side:[1,5],sign:10,start:2,statu:8,subject:1,support:[1,11],track:1,trust:1,usag:11,valid:1,verifi:[6,9,10],via:1,webinterfac:1,webserv:1,welcom:3,within:1,without:1,your:[1,2,7]}})
\ No newline at end of file
diff --git a/docs/source/getting_started.rst b/docs/source/getting_started.rst
index 77bd25e..6b7d388 100644
--- a/docs/source/getting_started.rst
+++ b/docs/source/getting_started.rst
@@ -27,7 +27,7 @@ Ansible Deployment
 
 `Ansible`_ offers the easiest way of creating a BounCA deployment for hosting your Certificate Authority.
 
-You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansbile installation.
+You need to have (root) access to a fresh installed Debian Jessie (virtual) machine. On your local machine you need to have a recent 2+ Ansible installation.
 Create your playbook ``install-bounca.yml``:
 
 .. code-block:: yaml