Encrypted Certificate Authority

I like to have the CA on my CD, but I don't want to expose the CA directly to the filesystem. So I created a tar archive of the CA, and encrypted^2.8 it with a symmetric key. With shellscript, it will be decrypted, untarred and mounted on a ramdisk.

If you have your own dedicated CA somewhere else, there is no need to put it on the CD.