3 ms·
We have our own CA but they don’t originate with any known root. They are self signed certs
by firesteelrain 2y ago
We have our own CA but they don’t originate with any known root. They are self signed certs
- viraptor 2y agoThat's ok, that's how you normally do it. But then the second step is adding that CA to the trusted store on all relevant clients, so that it can actually get verified. (Otherwise why bother with the CA, just self-sign everything individually)
- firesteelrain 2y agoIt’s our lack of a DevOps / Platform Dept. Our traditional IT groups won’t do it sadly I mean invest in Smallstep SSH - nope
- viraptor 2y agoSo let me get this straight: your IT won't do something, you're too lazy to add one flag to your scripts, so your solution is to ask that everyone has their security downgraded instead? That's... one way to approach tech issues.
- firesteelrain 2y agoIt’s obviously not a suggestion for everyone as I understand. If I could edit my original comment I would strike out my suggestion.
- deleted 2y ago[deleted]