Alexandre Sequeira mrsequeiraptc

Create Root CA (Done once)

Last update: Nov 2025.

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl ecparam -genkey -name secp384r1 | openssl ec -aes256 -out rootCA.key

	for bucket in $(aws s3api list-buckets --query 'Buckets[*].{Name:Name}' --output text)
	do

	echo "$bucket:"

	region=$(aws s3api get-bucket-location --bucket $bucket --query 'LocationConstraint' --output text \| awk '{sub(/None/,"eu-west-1")}; 1')
	parts=$(aws s3api list-multipart-uploads --bucket $bucket --region $region --query 'Uploads[*].{Key:Key,UploadId:UploadId}' --output text)

	if [ "$parts" != "None" ]; then
	IFS=$'\n'

	---

	hosts: all
	tasks:
	- name: add github ssh key
	copy: >
	src=files/id_rsa.github
	dest=/root/.ssh/id_rsa.github
	owner=root
	group=root

	-- show running queries (pre 9.2)
	SELECT procpid, age(clock_timestamp(), query_start), usename, current_query
	FROM pg_stat_activity
	WHERE current_query != '<IDLE>' AND current_query NOT ILIKE '%pg_stat_activity%'
	ORDER BY query_start desc;

	-- show running queries (9.2)
	SELECT pid, age(clock_timestamp(), query_start), usename, query
	FROM pg_stat_activity
	WHERE query != '<IDLE>' AND query NOT ILIKE '%pg_stat_activity%'