The solution and description are available here. The solution comes with three components.
- Bash script ca.sh. Script automates procedure described in the article. Creates a new Certificate Authority containing root and intermediate certificates. Also produces a certificate signed by the CA using CSR (Certificate Signing Request) or by providing all necessary data including CN.
- Java server Rest/API. Assuming CA is created, the Java server generates signed certificate through Rest/API.
- Docker script. The CA centre is created during Docker image creation and the container exposes Rest/API for certificate signing.