smallstep/certificates
View on GitHub ↗ ★ 9,031 Go
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
23 mentions on Hacker News by 13 people: 5 stories, 18 comments · first 2019-01-19 · latest 2024-10-22
20082026
-
How does this compare with smallstep step-ca certificates? https://github.com/smallstep/certificates
comment by mike978 · 2024-10-22 · in Just want simple TLS for your .internal network? -
I've been doing this for a while with SmallStep CA: https://github.com/smallstep/certificates It's a bit of a pain to load a cert onto every device (easier with stuff like Ansible if you have a bunch of linux devices), but manageable. And…
comment by gclawes · 2024-06-04 · in Special-use domain 'home.arpa.' (2018) -
…WiFi routers with WPA1 enterprise RADIUS support called Radiuz. [2] 0. https://opnsense.org 1. https://github.com/smallstep/certificates 2. https://web.archive.org/web/20040617153148/http://radiuz.net...
comment by 1letterunixname · 2024-01-05 · in WPA3 Enterprise 192-bit mode at home -
You can roll your own with https://github.com/smallstep/certificates . We maintain major open source projects and contribute a lot to other projects. I don’t think that means everything we do has to be open source. Sorry this one wasn’t.…
comment by mmalone · 2024-01-05 · in WPA3 Enterprise 192-bit mode at home -
…a lot less fiddly than having to drive OpenSSL directly. 1. https://github.com/smallstep/cli 2. https://github.com/smallstep/certificates
comment by jordemort · 2023-09-16 · in Running one’s own root Certificate Authority in 2023 -
I've had my eye on [step]( https://github.com/smallstep/certificates ) and [step-ca]( https://github.com/smallstep/certificates ) for a hot minute; it's production quality and seems much more pleasant than the EasyRSA scripts. Haven't…
comment by adrienthebo · 2022-10-31 · in Mkcert: Simple zero-config tool to make locally trusted development certificates -
▲ 3
Step-ca private CA and and ACME serverstory by wyuenho · 2022-02-07 · 0 comments
-
…started building out a management UI there, and it does map to the CLI as you've described :). [1] https://github.com/smallstep/certificates [2] https://github.com/smallstep/cli [3] https://smallstep.com/certificate-manager/
comment by mmalone · 2022-01-06 · in Should you use Let's Encrypt for internal hostnames? -
…scenarios and don't think it's particularly hard to do. Most of this is already implemented in https://github.com/smallstep/certificates : * Deploy the root cert via automation (so it's quickly rotatable) and/or keep it in a managed…
comment by mmalone · 2020-12-11 · in In Defense of Mutual TLS -
…open source CA that supports all of the challenge types as Let's Encrypt / ZeroSSL. [1]: https://github.com/smallstep/certificates/
comment by tashian · 2020-11-23 · in Another free CA as an alternative to Let's Encrypt -
Smallstep also offers an open source ssh-aware kms-backed certificate authority. https://github.com/smallstep/certificates One nice advantage is its support for different provisioning flows. The oauth flavor allows you to hook into an…
comment by dcow · 2020-07-04 · in SSH Emergency Access -
…certificate on each device. [1] https://blog.filippo.io/how-plex-is-doing-https-for-all-its-... [2] https://github.com/smallstep/certificates
comment by iwalton3 · 2020-06-28 · in Chromium and Mozilla to enforce 1 year validity for TLS certificates -
▲ 2
A private certificate authority for secure automated certificate managementstory by devy · 2020-04-30 · 0 comments
-
…is very welcome! [1] https://smallstep.com/sso-ssh/ [2] https://github.com/smallstep/cli [3] https://github.com/smallstep/certificates [4] https://smallstep.com/blog/diy-single-sign-on-for-ssh/
comment by mmalone · 2020-04-30 · in SSH hacks – a little sanity for remote workers -
…in mind. If you're looking for a general purpose personal CA, checkout smallstep/certificates: https://github.com/smallstep/certificates . Full disclosure, I work for smallstep, but we’re not exactly competitors. Regardless, here’s an…
comment by dcow · 2020-02-23 · in Safari will no longer trust certs valid for more than 13 months -
…[1] handle ACME, it's just as easy as using LetsEncrypt for public certificates. [1] https://github.com/smallstep/certificates
comment by eliaspro · 2020-02-03 · in Microsoft Teams outage due to expired certificate -
…and examples on our blog: https://smallstep.com/blog/private-acme-server/ * step-ca is on GitHub: https://github.com/smallstep/certificates We've been working on this for a while so we're psyched to release it and see how people use it!…
comment by mmalone · 2019-09-19 · in Show HN: Step-ca is a self-hosted open-source CA that supports ACME -
▲ 10
Show HN: Step-ca is a self-hosted open-source CA that supports ACMEstory by mmalone · 2019-09-19 · 1 comment
-
▲ 11
Smallstep/certificates: private certificate authority (X.509&SSH) & ACME serverstory by zdw · 2019-09-18 · 0 comments
-
…to use wildcard certs. See: https://github.com/cloudflare/cfssl https://github.com/hashicorp/vault https://github.com/smallstep/certificates
comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018) -
…) or vault ( https://github.com/hashicorp/vault ) or step certificates ( https://github.com/smallstep/certificates ) (which I work on) is probably easier and definitely better for internal services.
comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018) -
▲ 12
Show HN: Autocert – use TLS to access internal kubernetes services from anywherestory by mmalone · 2019-02-12 · 1 comment
-
…to an open source project[1] that does exactly that, if that’s what you end up needing. [1] https://github.com/smallstep/certificates
comment by mmalone · 2019-01-19 · in Ask HN: Where do you get CA validated “Client Certificates”?