TLS certificates for internal services done right

Re:TLS certificates for internal services done right by raquuk on Thursday July 09, 2026 @11:54AM (#48847992)

I am looking forward to finally using DNS-PERSIST-01 for validation. No more dynamic DNS updates, DNS credentials or forwarding necessary.

[ Parent | on HN ]

Re:TLS certificates for internal services done right by Thom2000 on Friday July 10, 2026 @07:20AM (#48858416)

Sadly most tools still doesn't support it: https://github.com/cert-manager/cert-manager/issues/8373#iss...

And then the issue is protecting the private key of the issuer and monitoring certificates (it's a good idea to do that anyway).

[ Parent | on HN ]

Re:TLS certificates for internal services done right by zeeZ on Saturday July 11, 2026 @09:59AM (#48872142)

One of the draft authors is already working on a cert-manager implementation. I'm optimistic it'll make it into cert-manager once the spec is ready and CAs actually start to implement it.

[ Parent | on HN ]