Hacker GitHub

← All repos

smallstep/certificates

View on GitHub ↗ ★ 9,031 Go

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

23 mentions on Hacker News by 13 people: 5 stories, 18 comments · first 2019-01-19 · latest 2024-10-22

Mentions per year 23 mentions · busiest year 2020 (8)
20082026
AllStoriesComments NewestTopOldest
  1. How does this compare with smallstep step-ca certificates? https://github.com/smallstep/certificates
    comment by mike978 · 2024-10-22 · in Just want simple TLS for your .internal network?
  2. I've been doing this for a while with SmallStep CA: https://github.com/smallstep/certificates It's a bit of a pain to load a cert onto every device (easier with stuff like Ansible if you have a bunch of linux devices), but manageable. And…
    comment by gclawes · 2024-06-04 · in Special-use domain 'home.arpa.' (2018)
  3. …WiFi routers with WPA1 enterprise RADIUS support called Radiuz. [2] 0. https://opnsense.org 1. https://github.com/smallstep/certificates 2. https://web.archive.org/web/20040617153148/http://radiuz.net...
    comment by 1letterunixname · 2024-01-05 · in WPA3 Enterprise 192-bit mode at home
  4. You can roll your own with https://github.com/smallstep/certificates . We maintain major open source projects and contribute a lot to other projects. I don’t think that means everything we do has to be open source. Sorry this one wasn’t.…
    comment by mmalone · 2024-01-05 · in WPA3 Enterprise 192-bit mode at home
  5. …a lot less fiddly than having to drive OpenSSL directly. 1. https://github.com/smallstep/cli 2. https://github.com/smallstep/certificates
    comment by jordemort · 2023-09-16 · in Running one’s own root Certificate Authority in 2023
  6. I've had my eye on [step]( https://github.com/smallstep/certificates ) and [step-ca]( https://github.com/smallstep/certificates ) for a hot minute; it's production quality and seems much more pleasant than the EasyRSA scripts. Haven't…
    comment by adrienthebo · 2022-10-31 · in Mkcert: Simple zero-config tool to make locally trusted development certificates
  7. …started building out a management UI there, and it does map to the CLI as you've described :). [1] https://github.com/smallstep/certificates [2] https://github.com/smallstep/cli [3] https://smallstep.com/certificate-manager/
    comment by mmalone · 2022-01-06 · in Should you use Let's Encrypt for internal hostnames?
  8. …scenarios and don't think it's particularly hard to do. Most of this is already implemented in https://github.com/smallstep/certificates : * Deploy the root cert via automation (so it's quickly rotatable) and/or keep it in a managed…
    comment by mmalone · 2020-12-11 · in In Defense of Mutual TLS
  9. …open source CA that supports all of the challenge types as Let's Encrypt / ZeroSSL. [1]: https://github.com/smallstep/certificates/
    comment by tashian · 2020-11-23 · in Another free CA as an alternative to Let's Encrypt
  10. Smallstep also offers an open source ssh-aware kms-backed certificate authority. https://github.com/smallstep/certificates One nice advantage is its support for different provisioning flows. The oauth flavor allows you to hook into an…
    comment by dcow · 2020-07-04 · in SSH Emergency Access
  11. …certificate on each device. [1] https://blog.filippo.io/how-plex-is-doing-https-for-all-its-... [2] https://github.com/smallstep/certificates
    comment by iwalton3 · 2020-06-28 · in Chromium and Mozilla to enforce 1 year validity for TLS certificates
  12. …is very welcome! [1] https://smallstep.com/sso-ssh/ [2] https://github.com/smallstep/cli [3] https://github.com/smallstep/certificates [4] https://smallstep.com/blog/diy-single-sign-on-for-ssh/
    comment by mmalone · 2020-04-30 · in SSH hacks – a little sanity for remote workers
  13. …in mind. If you're looking for a general purpose personal CA, checkout smallstep/certificates: https://github.com/smallstep/certificates . Full disclosure, I work for smallstep, but we’re not exactly competitors. Regardless, here’s an…
    comment by dcow · 2020-02-23 · in Safari will no longer trust certs valid for more than 13 months
  14. …[1] handle ACME, it's just as easy as using LetsEncrypt for public certificates. [1] https://github.com/smallstep/certificates
    comment by eliaspro · 2020-02-03 · in Microsoft Teams outage due to expired certificate
  15. …and examples on our blog: https://smallstep.com/blog/private-acme-server/ * step-ca is on GitHub: https://github.com/smallstep/certificates We've been working on this for a while so we're psyched to release it and see how people use it!…
    comment by mmalone · 2019-09-19 · in Show HN: Step-ca is a self-hosted open-source CA that supports ACME
  16. …to use wildcard certs. See: https://github.com/cloudflare/cfssl https://github.com/hashicorp/vault https://github.com/smallstep/certificates
    comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)
  17. …) or vault ( https://github.com/hashicorp/vault ) or step certificates ( https://github.com/smallstep/certificates ) (which I work on) is probably easier and definitely better for internal services.
    comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)
  18. …to an open source project[1] that does exactly that, if that’s what you end up needing. [1] https://github.com/smallstep/certificates
    comment by mmalone · 2019-01-19 · in Ask HN: Where do you get CA validated “Client Certificates”?