Smallstep Certificates Reviews and details

Social recommendations and mentions

• A convert from Judaism to Catholicism goes to r/Catholicism to ask if it would be appropriate to pass down a century old Jewish prayer shawl to his son. Not everyone is welcoming.

  Just a little heads up https://smallstep.com/certificates/. Source: almost 2 years ago

• Looking for an open source certificate management solution.

  Step-ca: Not web based, but the CLI is pretty user friendly: https://smallstep.com/certificates/. Source: almost 2 years ago

• Using k8s-apiserver as AAA server for microservices?

  I was just looking at https://smallstep.com/certificates a few days ago. It looks like they have an operator that fits your description as well as example docs for setting up inter-microservice mtls. Source: almost 2 years ago

• What are SSH Certificate Authority solutions?

  In the quick search I learned about Ssh cert authority which looks very manual and also like a dead project Smallstep's step-ca who put together very nice article about how to begin certificate authority process Netflix' BLESS is AWS only Cashier which also looks quite ok. Source: over 2 years ago

• Quickly prototyping and testing TLS services with valid certs

  If you want something a little fancier (I.e. Get automatic certs with all that ACME goodness) check out SmallStep. This is next on my list of homelab projects. Source: almost 3 years ago

• Ask HN: Self Host PKI

  My first question would be: do you really want to self-host? Google have a service that's affordable: https://cloud.google.com/certificate-authority-service AWS has a similar service but, the last time I checked, it wasn't as cheap. If you really want to self-host, consider the open source step-ca https://smallstep.com/certificates/ If you want to do everything yourself, I provide step by step instructions in my... - Source: Hacker News / almost 3 years ago

• Where do I get SSL wildcard certs for my domain?

  When you're not leaving your network why not going for self-singed certificates. step-ca/ is a nifty tool for a pki. Source: about 3 years ago

• SSL for localhost services hosting on rpi 4b

  I use STEP for this, it's running on my old RPi 2, and currently provides certificates for about every service on my network. It's also pretty easy to use, install it, have your machines trust the root CA, issue certificates via ACME, and you're done. It's basically letsencrypt with your own private CA. Source: about 3 years ago

• Which light weight CA do you like best?

  Step-ca? All the benefits of automated renewal provided by ACMEv2, but fully in your control. https://smallstep.com/certificates/. Source: about 3 years ago

• Let's Encrypt for internal sites/apps

  I recommend https://smallstep.com/certificates/ everything you need to deploy and internal CA. Source: over 3 years ago