VirtualTam's bookmarks

1. Building a Kubernetes Home Lab on the Raspberry Pi 2024-05-28

   tags: cryptography/certificate-authority, distributed-system, linux/container, linux/container/kubernetes, network/dns, raspberry-pi, self-hosting

   [ permalink ]

   1. Architecture & Roadmap
   2. Setup Kubernetes Management Node and Private Certificate Authority
   3. Configuring a Multi-Architecture Build Process
   4. Local DNS Services
2. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
3. The Sunlight Certificate Transparency Log 2024-03-16

   tags: cryptography/certificate, cryptography/certificate-authority, data-structure/tree, data-structure/tree/merkle-tree, letsencrypt, programming/go

   [ permalink ]

   • Introducing Sunlight, a CT implementation built for scalability, ease of operation, and reduced cost
   • Transparent Logs for Skeptical Clients
   • C2SP/C2SP - Community Cryptography Specification Project
   • FiloSottile/sunlight
   • transparency-dev/serverless-log
4. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

   tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

   [ permalink ]
5. mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like. 2021-12-26

   tags: cryptography/certificate, cryptography/certificate-authority, programming/go

   [ permalink ]

   • https://blog.filippo.io/mkcert-valid-https-certificates-for-localhost/
6. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

   [ permalink ]
7. CFSSL: Cloudflare's PKI and TLS toolkit 2020-02-05

   tags: cryptography, cryptography/certificate, cryptography/certificate-authority, security

   [ permalink ]

   • https://blog.cloudflare.com/introducing-cfssl/
8. How to Setup FileBeat with Basic Auth for LogStash Output? - Filebeat - Discuss the Elastic Stack 2018-01-12

   tags: cryptography/certificate, cryptography/certificate-authority, network/transport-layer-security, observability/elastic, observability/elastic/beats, observability/elastic/logstash, security, security/authentication

   [ permalink ]

   • https://github.com/logstash-plugins/logstash-input-beats/issues/8
   • https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html
   • https://www.elastic.co/guide/en/beats/filebeat/master/config-filebeat-logstash.html
   • https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html
   • https://www.gilesorr.com/blog/elkbeats-beats-secure.html
   • https://discuss.elastic.co/t/beats-logstash-security-use-of-security-token-to-authenticate-clients/104981/4
   • https://stackoverflow.com/questions/40341664/how-to-configure-logstash-and-filebeat-ssl-communication
9. OpenVPN/easy-rsa: easy-rsa - Simple shell based CA utility 2017-03-24

   tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, network/transport-layer-security, sysadmin

   [ permalink ]

   https://wiki.archlinux.org/index.php/Easy-RSA

10. OpenSSL Command-Line HOWTO 2016-10-18

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
11. How To Create an SSH CA to Validate Hosts and Clients with Ubuntu | DigitalOcean 2016-05-26

    tags: client, cryptography/certificate, cryptography/certificate-authority, network/ssh, security/authentication, server, sysadmin

    [ permalink ]
12. Let's Encrypt | Open Certificate Authority 2014-11-19

    tags: cryptography/certificate, cryptography/certificate-authority, internet/browser, network/http, network/transport-layer-security, web

    [ permalink ]

    Arriving Summer 2015... and provided by the ISRG (Internet Security Research Group: Mozilla, Cisco, EFF...)

13. How do I create my own Certificate Authority (CA) 2014-06-09

    tags: cryptography/certificate, cryptography/certificate-authority, network/transport-layer-security, privacy, security, web

    [ permalink ]