Generate custom x509 certificate in Okta

Sun, 19 Nov 2017 00:00:00 +0000

* Requires API key with admin access, least for the target app

Obtain app name & label using app ID

1
2
3
4
5


curl -v -X GET \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: SSWS ${api_token}" \
"https://[okta_instance].okta.com/api/v1/apps/[app_id]"

Generate custom certificate and capture ‘kid’ value from response

AWS KMS - two liners

Thu, 18 May 2017 00:00:00 +0000

For binary encrypted output:

1
2


aws kms encrypt --region ap-southeast-2 --key-id alias/blah --plaintext fileb://blah --output text --query CiphertextBlob | base64 --decode > blah.enc
aws kms decrypt --ciphertext-blob fileb://blah.enc --output text --query Plaintext | base64 --decode

For base64 encrypted output:

Security on Logan's Nest

Generate custom x509 certificate in Okta

AWS KMS - two liners