Skip to content
Richard Crowley edited this page Apr 12, 2014 · 3 revisions

Follow these steps to backup and restore your CA.

(This assumes your CA is in etc/ssl. If yours isn't, substitute your --db option.)

Backup

tar Ccz "etc/ssl" "." | gpg --recipient "example@example.com" --encrypt >"ssl.tar.gz.gpg"

Restore

gpg --decrypt <"ssl.tar.gz.gpg" | tar Cxz "etc/ssl"

Next: Revoke certificates