Looking for an easy to use, self hosted CA
reddit / selfhosted

----------------------------------------------------------------------
GhostHacks · 2023-10-14 16:51

Hey everyone I'm new to r/selfhosted but active on other subs like
r/homelab and r/HomeDataCenter, and most people there use Lets
Encrypt, but I'm looking for an internal self hosted CA (not Windows
AD CA) that's easy/simple to use.  Thought you guys here might have
other suggestions to Lets Encrypt.

----------------------------------------------------------------------
_jo_ku · 2023-10-14 17:19

[step-ca](https://github.com/smallstep/certificates)

----------------------------------------------------------------------
arcadianarcadian · 2023-10-14 19:18

mkCert
https://github.com/FiloSottile/mkcert

----------------------------------------------------------------------
thekrautboy · 2023-10-14 19:51

Doesnt get much simpler than
[mkcert](https://github.com/FiloSottile/mkcert) but something like
Step-CA has a lot of advantages.

----------------------------------------------------------------------
thundranos · 2023-10-15 02:36

I have used this for years, works well.

----------------------------------------------------------------------
Palleri · 2023-10-15 07:46

Hi, I am the author of [LocalCA](https://github.com/Palleri/localca-
buildv2).
It is a simple docker webgui
It does have a renew an email notification function that will remind
you when the certificates are about to expire.

It will give you a file or a base64 string which you can import to
desired server/host.

Reminder, this is not behind any logon so make sure to segregate this
server well. Preferable another vlan.

I use an nginx proxy with certificate authenticate to access LocalCA
Ssl_verify_client module called mTLS.

----------------------------------------------------------------------
xupetas · 2023-10-15 16:23

Freeipa/dogtag

----------------------------------------------------------------------
vrgpy · 2023-10-15 17:47

XCA but it has no automatic integratiins.