3 ms·
I believe this was mentioned last time TinyCert appeared on HN, but a self-hosted version of this would be more ideal. I personally use etcd-ca[0] to ease mana
by raidan 11y ago
I believe this was mentioned last time TinyCert appeared on HN, but a self-hosted version of this would be more ideal.
I personally use etcd-ca[0] to ease management of my own certificates.
[0] https://github.com/coreos/etcd-ca https://github.com/coreos/etcd-ca
- radiac 11y agoAs you say, I'd prefer to run this sort of thing locally - half the point of running your own CA is that you have full control over it. I wrote caman (https://github.com/radiac/caman https://github.com/radiac/caman), a bash script wrapper for openssl with what looks like a similar syntax to etcd-ca. I posted about it on HN a while back, but it now also supports SAN certificates and intermediate CAs.