Figuring out how Sigsum works, Part 1
After I finished the primary work on my Internal Certificate Authority I started down another rabbit hole which has led me even further from the original reason I created the internal CA to begin with. My tooling takes a snapshot of the Vault data, and I wanted to keep some sort of audit log. I have a normal backup process for the data, but I want to make checksums of the data and configuration, and then publish that to some sort of public record so the next time I need to use the CA, I can verify the state.