#sysadmin: "Sure, I run a CA with pure openssl and no outside software, no problem."

openssl-ca(1): BY ALL THAT"S HOLY, DON'T DO THIS.

@mwlucas What about things that are not holy?

@mansr

That's what #savagedBySystemd is for.

@mwlucas I''m dreading the day systemd sprouts a CA.