4 ms·
Quite off topic but I'm building a service that has many clients and I want to automate TLS setup when registering these clients with the main service. It's no
by andy_ppp 11y ago
Quite off topic but I'm building a service that has many clients and I want to automate TLS setup when registering these clients with the main service. It's not necessary to use lets encrypt for this as its between services I control.
Anyone know the easiest way to (semi) automate this? I'd be happy to generate someone a key that they have to copy onto the client when it's installed...
- e12e 11y agoI haven't found any that I was happy with, last time I needed something similar (years ago now). But I've had some similar worries, and one of the projects on my short-list to look into more is: https://github.com/coreos/etcd-ca https://github.com/coreos/etcd-ca Not sure if that'd help much if you explicitly want to use an external CA though.
- falsedan 11y agoYou want client certs to authenticate them to the service? You should look at Vault[0]. 0 : https://www.vaultproject.io/docs/secrets/pki/index.html https://www.vaultproject.io/docs/secrets/pki/index.html