Step-CA : Certificate Authority Server [IlyasaWiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Step-CA : Certificate Authority Server ======
step-ca is an online certificate authority for secure, automated certificate management for DevOps. It's the server counterpart to the step CLI tool

==== Install Step-CA ====
Ikuti [[https://smallstep.com/docs/step-ca/installation/#debianubuntu|Installation guide]]
<code>
apt-get update && apt-get install -y --no-install-recommends curl gpg ca-certificates
curl -fsSL https://packages.smallstep.com/keys/apt/repo-signing-key.gpg -o /etc/apt/keyrings/smallstep.asc
cat << EOF > /etc/apt/sources.list.d/smallstep.sources
Types: deb
URIs: https://packages.smallstep.com/stable/debian
Suites: debs
Components: main
Signed-By: /etc/apt/keyrings/smallstep.asc
EOF
apt-get update && apt-get -y install step-cli step-ca
</code>

==== Init CA ====
<code bash>
step ca init \
  --name="IlyasaID Internal CA" \
  --dns="ca.internal" \
  --address=":443" \
  --provisioner="admin@internal"
</code>