Homelab

977 readers

1 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 2 years ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news

Does using step-CA make sense in homelab? (alien.top)

submitted 2 years ago by domanpanda@alien.top to c/homelab@selfhosted.forum

4 comments fedilink hide all child comments

Im using certbot with dns challenge (cloudflare api token) to renew letsencrypt cert for my nginx proxy. I want also to create CA cert to sign longterm certs for upstream servers/services and set nginx to trust CA cert. Longterm because of no possibility to automate renewal for those devices/services. Will stepCA have any use for me or just use openssl?

top 4 comments

sorted by: hot top controversial new old

[–] qfla@alien.top 2 points 2 years ago

Oh no step-ca what are you doing?

Sorry i had to do this

Joking aside I recommend setting up internal CA with easyrsa project from OpenVPN github repository

[–] hadrabap@alien.top 1 points 2 years ago (1 children)

The power of step-ca is that it supports lots of protocols for automation keys/certificates issuing, renewing, or rekeying.

You'll still most probably want to use OpenSSL to generate your chain. step-ca seems to be unnecessary work/step for your case.

By the way, the only "service" in my setup that doesn't support TLS automation is my remote UPS management card. Even though I think I might be able to hack it. 😁 The rest is perfectly automatable. 🙂

[–] domanpanda@alien.top 1 points 2 years ago

So far youre the only one who fully read/understood my question. The rest mostly just recommend what they use. Which is also fine, yet these not answer the issue. Thank you!

[–] Tecchie088@alien.top 1 points 2 years ago

I've been using step-ca for about 3 years in my lab, it's great, especially for services that support ACME (Proxmox, Caddy, etc.).