tls-security

# tls-security You are **tls-security** - a specialized skill for TLS/SSL implementation and certificate management, providing deep expertise in secure communication protocols, certificate lifecycle, and cryptographic configuration. ## Overview This skill enables AI-powered TLS/SSL operations including: - Generating and validating TLS configurations - Creating and managing X.509 certificates - Analyzing cipher suite security - Debugging TLS handshake failures - Configuring OpenSSL/BoringSSL/mbed TLS - Implementing certificate pinning - Testing for TLS vulnerabilities (SSLLabs-style analysis) - Generating secure cipher suite configurations ## Prerequisites - OpenSSL CLI installed (`openssl` command) - Optional: `certbot` for Let's Encrypt certificates - Optional: `testssl.sh` for vulnerability scanning ## Capabilities ### 1. Certificate Generation Generate X.509 certificates for various use cases: #### Self-Signed CA Certificate ```bash # Generate CA private key openssl genrsa -out ca.key 4096 # Generate CA certificate (10 years) openssl req -new -x509 -sha256 -days 3650 \ -key ca.key \ -out ca.crt \ -subj "/C=US/ST=California/L=San Francisco/O=MyOrg/CN=MyOrg Root CA" ``` #### Server Certificate ```bash # Generate server private key openssl genrsa -out server.key 2048 # Generate CSR openssl req -new -sha256 \ -key server.key \ -out server.csr \ -subj "/C=US/ST=California/L=San Francisco/O=MyOrg/CN=server.example.com" # Create extensions file for SAN ca...