Not only do I have the hole in my office roof repaired (yay!), I've built on my successes with openssl and running my own CA:
I now have a CA (step-ca) which I can use via ACME, generating and renewi...
Renewal is sorted: I am issuing certs with a slightly longer life span anyway, but now they will renew automatically using a systemd timer even if they are just a 24 hour certificate.
Plus, for no apparent reason but it seems like a good idea, I have limited my ability to generate certificates to domains that I control. Although, since I'm the only user, and since I can easily reload the config, this doesn't count for much.
Plus, for no apparent reason but it seems like a good idea, I have limited my ability to generate certificates to domains that I control. Although, since I'm the only user, and since I can easily reload the config, this doesn't count for much.
1