https://kula.tproa.net/tags/pki/ Recent content in pki on Late Night Thinking Hugo -- gohugo.io en-us © 2020-2025. All rights reserved. Mon, 12 Oct 2026 20:52:36 +0000 https://kula.tproa.net/lnt/2026/10/internal-certificate-authority/ Mon, 12 Oct 2026 20:52:36 +0000 https://kula.tproa.net/lnt/2026/10/internal-certificate-authority/ I’ve finally gotten annoyed enough with openssl that I broke down and switched to using a standalone HashiCorp Vault instance to manage internal certificates. It’s a single-node instance which stores data in a local directory. Configuration management for everything except the leaf certificates is managed with some local Terraform code. With my current configuration, no sensitive data is maintained in the Terraform state, so I can track the state file in git along with the configuration — the state is small enough that I’m fine with that.