News for hackers. Stuff that matters.

A comment on Running one’s own root Certificate Authority in 2023.

Re:Running one’s own root Certificate Authority in 2023 by e12e on Saturday September 16, 2023 @09:32PM (#37540592)
"Only" missing how to safely distribute, trust and revoke/renew the root cert - and how to enforce/distribute revocation lists for certs...
[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by wejn on Sunday September 17, 2023 @02:27AM (#37542098)
"only" out of scope.

But based on the comments here, I guess you could use the smallstep CA with Nitrokey HSM if that's your jam...

[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by e12e on Monday September 18, 2023 @05:06AM (#37553892)
Well, the title says: "Running one's own root Certificate Authority in 2023".

"Running a CA" is pretty much dominated by managing certificates? Including distribution and revocation - not just issuing?

[ Parent | on HN ]