Let's Encrypt the house!
Cause when you fail, somebody has to laugh at you
GitHub - smallstep/certificates: 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
github.com🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH. - smallstep/certificates
stfn (@stfn@fedi.stfn.pl)
The only thing I lose with moving from Tailscale to Wireguard is that Tailscale was providing TLS certs for some of my services, but I guess I can live with that.
Announcing X.509 Certificate Flexibility
We've added X.509 certificate templates to Step Certificates
SSO for SSH - Which tool to use? | IDPea
You want to add extra security and/or Single Sign-On to your SSH server(s), but how? Here is a short summary of the most common solutions
Security Vulnerabilities in Smallstep PKI Software
Smallstep's PKI software is vulnerable to JSON injection, misuses JWTs, and relies on client-side enforcement of server-side security.