If OpenSSL were a GUI

Updated on: June 8, 2023

Carl Tashian

"When something exceeds your ability to understand how it works,
it sort of becomes magical." - Jony Ive

*This is incomplete. It covers about 80% of one corner of OpenSSL's functionality. The certificate policy options have a lot more knobs that I didn't include.

Carl Tashian (Website, LinkedIn) is an engineer, writer, exec coach, and startup all-rounder. He's currently an Offroad Engineer at Smallstep. He co-founded and built the engineering team at Trove, and he wrote the code that opens your Zipcar. He lives in San Francisco with his wife Siobhan and he loves to play the modular synthesizer 🎛️🎚️

Unlocking Zero Trust Security: Apple MDA for MDM Device Enrollment and Web Application Security

By Linda Ikechukwu

Discover how Apple Managed Device Attestation (MDA) helps realise Zero Trust Security by guaranteeing secure MDM device enrollment and web application protection.

Certificate Based Wifi Authentication With RADIUS and EAP-TLS

By Linda Ikechukwu

This article answers important questions for someone who has been hearing about EAP TLS, certificate-based WiFi, RADIUS, and who may have been tasked with building out a proof of concept (POC) and wants to know how to proceed.

You shouldn’t run NSA-grade Wi-Fi at home. Here’s how to do it

By Carl Tashian

For our 2023 holiday project, we're setting up an WPA3 Enterprise certificate-authenticated Wi-Fi network at home! And when your family from out of town asks to "jump on the Wi-Fi real quick," you'll learn why this type of network is such a hassle to manage.

If OpenSSL were a GUI

Managed workloads and devices

Further Reading

Unlocking Zero Trust Security: Apple MDA for MDM Device Enrollment and Web Application Security

Certificate Based Wifi Authentication With RADIUS and EAP-TLS

You shouldn’t run NSA-grade Wi-Fi at home. Here’s how to do it