TinyCert – Become Your Own PKI/CA Authority in a Matter of Minutes

Re:TinyCert – Become Your Own PKI/CA Authority in a Matter o... by raidan on Tuesday September 22, 2015 @01:51AM (#10256846)

I believe this was mentioned last time TinyCert appeared on HN, but a self-hosted version of this would be more ideal.

I personally use etcd-ca[0] to ease management of my own certificates.

[0] https://github.com/coreos/etcd-ca

[ Parent | on HN ]

Re:TinyCert – Become Your Own PKI/CA Authority in a Matter o... by radiac on Tuesday September 22, 2015 @04:02AM (#10257256)

As you say, I'd prefer to run this sort of thing locally - half the point of running your own CA is that you have full control over it.

I wrote caman (https://github.com/radiac/caman), a bash script wrapper for openssl with what looks like a similar syntax to etcd-ca. I posted about it on HN a while back, but it now also supports SAN certificates and intermediate CAs.

[ Parent | on HN ]