News for hackers. Stuff that matters.

A comment on Running one’s own root Certificate Authority in 2023. Parent comment

Re:Running one’s own root Certificate Authority in 2023 by firesteelrain on Sunday September 17, 2023 @07:34AM (#37543913)
This is an internal, airgapped network.

We stood up the root CA, created the certificate, imported it, then destroyed the root CA. It’s a common security practice. Root CA can then never be compromised

[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by wejn on Sunday September 17, 2023 @10:45AM (#37545548)
If you destroy the CA, how do you issue new certs via ACME?
[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by firesteelrain on Sunday September 17, 2023 @02:26PM (#37547957)
Sub CAs or Intermediate CA

The root CA certificate is used to establish trust in the chain of trust, but it is not directly involved in the certificate issuance process once the trust has been established.

[ Parent | on HN ]