Fosstodon

Daniel S. ReichenbachIf you are into <a href="https://mastodon.world/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosted</a> infrastructure, I have a new <a href="https://mastodon.world/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> <a href="https://mastodon.world/tags/cert" class="mention hashtag" rel="nofollow noopener" target="_blank">#cert</a>-manager webhook for you:The Canonical <a href="https://mastodon.world/tags/MAAS" class="mention hashtag" rel="nofollow noopener" target="_blank">#MAAS</a> webhook allows you to use your internal MAAS API along with an e.g. a <a href="https://mastodon.world/tags/smallstep" class="mention hashtag" rel="nofollow noopener" target="_blank">#smallstep</a> CA with the ACME provisioner enabled.<a href="https://github.com/kogito-ops/cert-manager-webhook-maas" rel="nofollow noopener" translate="no" target="_blank">https://github.com/kogito-ops/cert-manager-webhook-maas</a>If you wanted this too, give it a try, leave some feedback. 👋

Risotto Biaswonder if the <a href="https://toot.risottobias.org/tags/SmallStep" class="mention hashtag" rel="nofollow noopener" target="_blank">#SmallStep</a> folks have made a "make your own tiny CA" that you can install client side such that you only trust the CA to issue certs for a particular domain. (Name Constraints extension support for e.g. Firefox)e.g., only trusting a CA for certs of *.example.com or something.<a href="https://toot.risottobias.org/tags/TLS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLS</a> <a href="https://toot.risottobias.org/tags/cryptography" class="mention hashtag" rel="nofollow noopener" target="_blank">#cryptography</a> <a href="https://toot.risottobias.org/tags/PKI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PKI</a> <a href="https://toot.risottobias.org/tags/certificatetransparency" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificatetransparency</a> <a href="https://toot.risottobias.org/tags/firefox" class="mention hashtag" rel="nofollow noopener" target="_blank">#firefox</a>

kgoetzPlanning to make <a href="https://aus.social/tags/CertificateAuthority" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertificateAuthority</a> for our business. Opinions on <a href="https://aus.social/tags/smallstep" class="mention hashtag" rel="nofollow noopener" target="_blank">#smallstep</a> <a href="https://aus.social/tags/certificates" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificates</a> Vs <a href="https://aus.social/tags/EasyRSA" class="mention hashtag" rel="nofollow noopener" target="_blank">#EasyRSA</a> ?

Andreas BullingVielleicht interessant für manche <a href="https://mastodon.social/tags/homeserver" class="mention hashtag" rel="nofollow noopener" target="_blank">#homeserver</a> Besitzer:innen, die ihre Systeme nur in ihrem - vom Internet "isolierten" -Heimnetz nutzen, aber trotzdem nicht auf SSL verzichten möchten:Mit <a href="https://mastodon.social/tags/smallstep" class="mention hashtag" rel="nofollow noopener" target="_blank">#smallstep</a> lässt sich innerhalb von Minuten eine eigene CA aufsetzen.<a href="https://github.com/smallstep/certificates" rel="nofollow noopener" translate="no" target="_blank">https://github.com/smallstep/certificates</a>

Roland100$? no way. The Yubikey is 60€, the TRNG is 30€ + shipping alone, not to mention the RPI <a href="https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi-yubikey/" rel="nofollow noopener" translate="no" target="_blank">https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi-yubikey/</a><a href="https://vm.io/tags/smallstep" class="mention hashtag" rel="nofollow noopener" target="_blank">#smallstep</a> <a href="https://vm.io/tags/CA" class="mention hashtag" rel="nofollow noopener" target="_blank">#CA</a> <a href="https://vm.io/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#homelab</a>

Mauricio Teixeira 🇺🇸🇧🇷And, after some hard work, and a few struggles with <a href="https://hachyderm.io/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a>, <a href="https://hachyderm.io/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> and <a href="https://hachyderm.io/tags/Firewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#Firewall</a> rules, I finally have been able to install <a href="https://hachyderm.io/tags/StepCA" class="mention hashtag" rel="nofollow noopener" target="_blank">#StepCA</a> from <a href="https://hachyderm.io/tags/SmallStep" class="mention hashtag" rel="nofollow noopener" target="_blank">#SmallStep</a> on my <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a>, so now I have a nice private <a href="https://hachyderm.io/tags/CertificateAuthority" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertificateAuthority</a> with which I can use <a href="https://hachyderm.io/tags/Certbot" class="mention hashtag" rel="nofollow noopener" target="_blank">#Certbot</a> to manage my service certificates in a <a href="https://hachyderm.io/tags/LetsEncrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#LetsEncrypt</a> style. Took a lot of notes. Blog post will come eventually! (too tired right now) <a href="https://smallstep.com/docs/step-ca/" rel="nofollow noopener" translate="no" target="_blank">https://smallstep.com/docs/step-ca/</a>

shulhan<a href="https://kilabit.info/journal/2023/research_ssh_with_2fa/" target="_blank" rel="nofollow noopener" translate="no">https://kilabit.info/journal/2023/research_ssh_with_2fa/</a>In this journal, we review several options to manage <a href="https://fosstodon.org/tags/SSH" class="mention hashtag" rel="tag">#SSH</a> authorization beyond using public keys, possibly also enabling 2FA, using Time-Based One-Time Password (TOTP). Some of the alternatives that we will review are Google Cloud OS Login, <a href="https://fosstodon.org/tags/Smallstep" class="mention hashtag" rel="tag">#Smallstep</a>, <a href="https://fosstodon.org/tags/Teleport" class="mention hashtag" rel="tag">#Teleport</a>, and google-authenticator-libpam.<a href="https://fosstodon.org/tags/sysadmin" class="mention hashtag" rel="tag">#sysadmin</a> <a href="https://fosstodon.org/tags/security" class="mention hashtag" rel="tag">#security</a>

PhoenixSerenityOn <a href="https://mastodon.sdf.org/tags/repatriation" class="mention hashtag" rel="nofollow noopener" target="_blank">#repatriation</a> - <a href="https://mastodon.sdf.org/tags/Rohingyas" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rohingyas</a> have <a href="https://mastodon.sdf.org/tags/MixedOpinions" class="mention hashtag" rel="nofollow noopener" target="_blank">#MixedOpinions</a> from <a href="https://mastodon.sdf.org/tags/distrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#distrust</a> of <a href="https://mastodon.sdf.org/tags/Junta" class="mention hashtag" rel="nofollow noopener" target="_blank">#Junta</a> & <a href="https://mastodon.sdf.org/tags/fear" class="mention hashtag" rel="nofollow noopener" target="_blank">#fear</a> of <a href="https://mastodon.sdf.org/tags/persecution" class="mention hashtag" rel="nofollow noopener" target="_blank">#persecution</a> still in their mind. The <a href="https://mastodon.sdf.org/tags/PilotProject" class="mention hashtag" rel="nofollow noopener" target="_blank">#PilotProject</a> is that <a href="https://mastodon.sdf.org/tags/SmallStep" class="mention hashtag" rel="nofollow noopener" target="_blank">#SmallStep</a> that needs to be taken.  On the other hand, <a href="https://mastodon.sdf.org/tags/deadline" class="mention hashtag" rel="nofollow noopener" target="_blank">#deadline</a> for <a href="https://mastodon.sdf.org/tags/Myanmar" class="mention hashtag" rel="nofollow noopener" target="_blank">#Myanmar</a> <a href="https://mastodon.sdf.org/tags/counterargument" class="mention hashtag" rel="nofollow noopener" target="_blank">#counterargument</a> in the Rohingya <a href="https://mastodon.sdf.org/tags/genocide" class="mention hashtag" rel="nofollow noopener" target="_blank">#genocide</a> case at the <a href="https://mastodon.sdf.org/tags/InternationalCourt" class="mention hashtag" rel="nofollow noopener" target="_blank">#InternationalCourt</a> of <a href="https://mastodon.sdf.org/tags/Justice" class="mention hashtag" rel="nofollow noopener" target="_blank">#Justice</a> (<a href="https://mastodon.sdf.org/tags/ICJ" class="mention hashtag" rel="nofollow noopener" target="_blank">#ICJ</a> ) has been set for April 24 this year. To some experts, the sudden repatriation plan has <a href="https://mastodon.sdf.org/tags/connection" class="mention hashtag" rel="nofollow noopener" target="_blank">#connection</a> w/the <a href="https://mastodon.sdf.org/tags/GenocideCase" class="mention hashtag" rel="nofollow noopener" target="_blank">#GenocideCase</a><a href="https://thegeopolitics.com/will-the-junta-come-out-from-their-cocoon-to-accept-rohingyas" rel="nofollow noopener" target="_blank">https://thegeopolitics.com/will-the-junta-come-out-from-their-cocoon-to-accept-rohingyas</a><a href="https://mastodon.sdf.org/tags/AsianMastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#AsianMastodon</a> <a href="https://mastodon.sdf.org/tags/Myanmar" class="mention hashtag" rel="nofollow noopener" target="_blank">#Myanmar</a> <a href="https://mastodon.sdf.org/tags/Burma" class="mention hashtag" rel="nofollow noopener" target="_blank">#Burma</a>

Matt KnightIs it possible to install a client TLS client certificate on an iPhone running iOS 16?I'm trying to do it but can't get it to show the certificate as verified (even though the Root and Intermediate CAs are both installed, verified and fully trusted).Really want to leverage mTLS. I've had it working on an iPhone before (a couple of years ago, I think), but not sure if it's possible any longer.<a href="https://mastodon.knight.fyi/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#tls</a> <a href="https://mastodon.knight.fyi/tags/https" class="mention hashtag" rel="nofollow noopener" target="_blank">#https</a> <a href="https://mastodon.knight.fyi/tags/smallstep" class="mention hashtag" rel="nofollow noopener" target="_blank">#smallstep</a> <a href="https://mastodon.knight.fyi/tags/stepca" class="mention hashtag" rel="nofollow noopener" target="_blank">#stepca</a> <a href="https://mastodon.knight.fyi/tags/mtls" class="mention hashtag" rel="nofollow noopener" target="_blank">#mtls</a> <a href="https://mastodon.knight.fyi/tags/https" class="mention hashtag" rel="nofollow noopener" target="_blank">#https</a> <a href="https://mastodon.knight.fyi/tags/iphone" class="mention hashtag" rel="nofollow noopener" target="_blank">#iphone</a> <a href="https://mastodon.knight.fyi/tags/ios" class="mention hashtag" rel="nofollow noopener" target="_blank">#ios</a> <a href="https://mastodon.knight.fyi/tags/apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#apple</a> <a href="https://mastodon.knight.fyi/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

ϺΛDИVTTΛHNice, <a href="https://fosstodon.org/tags/pihole" class="mention hashtag" rel="tag">#pihole</a> is working flawlessly again including a fresh issued certificate from my recreated <a href="https://fosstodon.org/tags/smallstep" class="mention hashtag" rel="tag">#smallstep</a> <a href="https://fosstodon.org/tags/ca" class="mention hashtag" rel="tag">#ca</a> after I've ruined it successfully yesterday trying to post-init ssh. :blobcatgiggle:

ϺΛDИVTTΛHThere are only two <a href="https://fosstodon.org/tags/webservices" class="mention hashtag" rel="tag">#webservices</a> without <a href="https://fosstodon.org/tags/ssl" class="mention hashtag" rel="tag">#ssl</a> remaining, which I'll switch too. <a href="https://fosstodon.org/tags/pihole" class="mention hashtag" rel="tag">#pihole</a>, my <a href="https://fosstodon.org/tags/nas" class="mention hashtag" rel="tag">#nas</a> and <a href="https://fosstodon.org/tags/opnsense" class="mention hashtag" rel="tag">#opnsense</a> is serving their pages using ssl already. <a href="https://fosstodon.org/tags/smallstep" class="mention hashtag" rel="tag">#smallstep</a> <a href="https://fosstodon.org/tags/pki" class="mention hashtag" rel="tag">#pki</a> <a href="https://fosstodon.org/tags/ca" class="mention hashtag" rel="tag">#ca</a> <a href="https://fosstodon.org/tags/certificateauthority" class="mention hashtag" rel="tag">#certificateauthority</a> <a href="https://fosstodon.org/tags/selfhosting" class="mention hashtag" rel="tag">#selfhosting</a> <a href="https://fosstodon.org/tags/docker" class="mention hashtag" rel="tag">#docker</a>

ϺΛDИVTTΛH<a href="https://fosstodon.org/tags/opnsense" class="mention hashtag" rel="tag">#opnsense</a> is the first <a href="https://fosstodon.org/tags/certificate" class="mention hashtag" rel="tag">#certificate</a> holder of my new <a href="https://fosstodon.org/tags/smallstep" class="mention hashtag" rel="tag">#smallstep</a> <a href="https://fosstodon.org/tags/ca" class="mention hashtag" rel="tag">#ca</a> The <a href="https://fosstodon.org/tags/docker" class="mention hashtag" rel="tag">#docker</a> setup wasn't quite intuitive and I struggled from one issue to another but it works nicely now.

ϺΛDИVTTΛHThe next addition for my <a href="https://fosstodon.org/tags/homelab" class="mention hashtag" rel="tag">#homelab</a> will be a <a href="https://fosstodon.org/tags/selfhosted" class="mention hashtag" rel="tag">#selfhosted</a> <a href="https://fosstodon.org/tags/docker" class="mention hashtag" rel="tag">#docker</a> <a href="https://fosstodon.org/tags/ca" class="mention hashtag" rel="tag">#ca</a>. I'll use <a href="https://fosstodon.org/tags/smallstep" class="mention hashtag" rel="tag">#smallstep</a>. :ablobcatwink:

Dr. Roy Schestowitz (罗伊)● NEWS ● <a class="hashtag" href="https://pleroma.site/tag/smallstep" rel="nofollow noopener" target="_blank">#SmallStep</a> ☞ DIY <a class="hashtag" href="https://pleroma.site/tag/ssh" rel="nofollow noopener" target="_blank">#SSH</a> Bastion Host <a href="https://smallstep.com/blog/diy-ssh-bastion-host/" rel="nofollow noopener" target="_blank">https://smallstep.com/blog/diy-ssh-bastion-host/</a>

Dr. Roy Schestowitz (罗伊)● NEWS ● <a class="hashtag" href="https://pleroma.site/tag/smallstep" rel="nofollow noopener" target="_blank">#SmallStep</a> <a class="hashtag" href="https://pleroma.site/tag/programming" rel="nofollow noopener" target="_blank">#Programming</a> ☞ <a class="hashtag" href="https://pleroma.site/tag/ssh" rel="nofollow noopener" target="_blank">#SSH</a> Emergency Access <a href="https://smallstep.com/blog/ssh-emergency-access/" rel="nofollow noopener" target="_blank">https://smallstep.com/blog/ssh-emergency-access/</a>

Dr. Roy Schestowitz (罗伊)● NEWS ● <a class="hashtag" href="https://pleroma.site/tag/smallstep" rel="nofollow noopener" target="_blank">#smallstep</a> <a class="hashtag" href="https://pleroma.site/tag/encryption" rel="nofollow noopener" target="_blank">#encryption</a> <a class="hashtag" href="https://pleroma.site/tag/security" rel="nofollow noopener" target="_blank">#security</a> ☞ DIY Single Sign-On for <a class="hashtag" href="https://pleroma.site/tag/ssh" rel="nofollow noopener" target="_blank">#SSH</a> <a href="https://smallstep.com/blog/diy-single-sign-on-for-ssh/" rel="nofollow noopener" target="_blank">https://smallstep.com/blog/diy-single-sign-on-for-ssh/</a>

Recent searches

Search options

Administered by:

Server stats:

#smallstep