Building Two-Tier CA/PKI Infrastructure with Hashicorp Vault

Building Two-Tier CA/PKI Infrastructure with Hashicorp Vault

Yuli Stremovsky ???? Yuli Stremovsky ????

Yuli Stremovsky ????

Building Secure Cloud & Data Solutions

发布日期: 2019年8月19日
+ 关注

I love to work with Hashicorp Vault in the cloud projects. It is a great solution for companies that do not want to lock themselves to Google or AWS cloud. It has strong features like dynamic passwords, secrets management, certificates, tokens, etc…

Today I will delve into Hashicorp Certificate Authority project I recently built. I built the two-tier CA hierarchy project with the offline root Certificate Authority server and online signing Certificate Authority, that is considered a classical by-the-book solution.

No alt text provided for this image

Some theoretical information

Certificate Authority is in charge to generate and revoke service/user/application certificates. It is a part of PKI – Public Key Infrastructure infrastructure. For example, when you surf the Internet and the website address starts with https, it means the website has an SSL certificate installed and all communication is encrypted. This SSL certificate is generated by Certificate Authority.

The full article is available at:

https://cloudinvent.com/blog/howto-hashicorp-vault-ca-pki-deployment/

要查看或添加评论，请登录

社区洞察

其他会员也浏览了