this post was submitted on 28 Oct 2023
3 points (100.0% liked)

Homelab

1034 readers
3 users here now

Rules

founded 2 years ago
MODERATORS
 

Im using certbot with dns challenge (cloudflare api token) to renew letsencrypt cert for my nginx proxy. I want also to create CA cert to sign longterm certs for upstream servers/services and set nginx to trust CA cert. Longterm because of no possibility to automate renewal for those devices/services. Will stepCA have any use for me or just use openssl?

you are viewing a single comment's thread
view the rest of the comments
[–] Tecchie088@alien.top 1 points 2 years ago

I've been using step-ca for about 3 years in my lab, it's great, especially for services that support ACME (Proxmox, Caddy, etc.).