Automate Local TLS Certificates With Step-CA

As useful as OpenSSL has been for letting me manage TLS certificates for internal IT devices, after a while this becomes time consuming and tedious

For one thing, there's a few a steps to go through to create a certificate and just before a certificate expires you have to go through more steps to revoke the certificate and then create a new one

Now while Let's Encrypt allows you to automate certificate provisioning, you'd need a public domain name and be willing to leak details about your internal devices to the Public Internet. In other words, it's a bad idea

So wouldn't it be good if you could have the security benefit of OpenSSL and the automation benefit of Let's Encrypt

Well you can with an open source certificate authority called step-ca

Not only can you install this on an internal computer, it supports ACME provisioning

And in this video we'll go over how to install and configure step-ca as well as demonstrate how to configure Proxmox VE to use it

=============================
SUPPORT THE CHANNEL
Donate through Paypal:
https://paypal.me/DavidMcKone
Donate through Buy Me A Coffee:
https://buymeacoffee.com/dmckone
Become a monthly contributor on Patreon:
  / dmckone  
Become a monthly contributor on YouTube:
   / techtutorialsdavidmckone  
==============================

=============================
MY RECORDING HARDWARE:
Blue Yeti USB Microphone
https://amzn.to/3IfL3qm
Blue Radius III Custom Shockmount for Yeti and Yeti Pro USB Microphones
https://amzn.to/3G3f89P
RØDE PSA1 Professional Studio Arm
https://amzn.to/3Z3lPBF
Aokeo Professional Microphone Pop Filter
https://amzn.to/3VuZl9H
Sony Alpha ZV-E10L Mirrorless Camera
https://amzn.to/3ITHCoU
Elgato Cam Link 4K Capture Card
https://amzn.to/43CzQaT
Neewer NP-FW50 Dummy Battery Charger Kit
https://amzn.to/3qp9Q4s
Elgato Key Light Air - Professional 1400 lumens Desk Light
https://amzn.to/3G81OB9
Neewer 2 Packs Tabletop LED Video Light Kit
https://amzn.to/3CcuN5O
Elgato Green Screen
https://amzn.to/3CoJBOL
=============================

==============================
MEDIA LINKS:
Website - https://www.techtutorials.tv/
Twitter -   / dsmckone1  
==============================

For more technical information, including commands used, check out our blog post
https://www.techtutorials.tv/sections...

Useful links:
https://smallstep.com/docs/step-ca/
https://smallstep.com/docs/step-cli/
https://hub.docker.com/r/smallstep/st...
https://smallstep.com/blog/private-ac...
https://www.cyberciti.biz/faq/linux-p...

Chapters
00:00 Intro
01:05 Assumptions
01:21 Initial Setup
08:52 Password File
11:34 Bootstrapping and Testing
14:37 ACME Server Provisoner
16:23 Proxmox VE ACME Client Configuration
26:25 Compose Service Account
35:32 Summary

ssl certificate,tls certificate,certificate authority,ca server,certificate authority server,how to create certificate server,proxmox web certificate,step-ca,automate tls certificate,automate web certificate,automate certificate provisioning,automated certificate provisioning