Comment on If I use Caddy for reverse-proxying into another local machine... is my local connection not HTTPS?
johannes@lemmy.jhjacobs.nl 1 week agoThe reason i chose Step CA over openSSL is because with step CA you can automate certificate renewal without any manual intervention. I don’t know how that would work with openSSL except some heavy scripting?
N0x0n@lemmy.ml 1 week ago
Yeah thats correct !
I Wouldn’t say heavy though (maybe I see it that way because I got a bit better with bash and the like :p) because you can make use of CLR to revoke your certificates and renew them very easily with your intermediate and ready to use config files.
But yeah, there isn’t any automated way to manage certificates like Smallstep does :)
johannes@lemmy.jhjacobs.nl 1 week ago
You mentioned a book though… Now i’m curious ;-)
N0x0n@lemmy.ml 6 days ago
www.amazon.com/…/1800560346
It’s really a good book :) And the last part is all about a mini-ca for your homelab !
However, don’t use the ED448/ED25519 algorithm based certificates for TLS as mentioned in the example… They are still not supported by any browser !
If you can support the author, please do ! If you’re on a budget, it’s really easy to find in the piracy corner.