Hey folks! I'm a DevOps professional with about 3 years of experience. I'm looking to boost the security of my homelab as part of my Certified Kubernetes Security Specialist journey. I've set up TinyAuth using a Raspberry Pi and Yubikey, but I'm struggling to fully grasp the concepts involved. I really want to use TinyAuth as my Certificate Authority for generating client certificates, work with Istio's mTLS, and establish mTLS with a remote pangolin instance. Any recommended study materials or resources would be greatly appreciated! Thanks in advance!
3 Answers
Have you checked out Cloudflare's cfssl? It's a fantastic tool with great documentation that could really help you set things up smoothly.
For study materials, I recommend exploring the cryptographic principles behind certificate systems. Understanding those will make deploying a CA and configuring your lab much clearer. It mostly involves reading the documentation and managing configs.
I'd suggest starting with the basics of keys and certificates. Once you have those down, dive into mTLS, then just get hands-on! You'll find it makes sense as you go. Keeping it simple is key, maybe look into TinyHost as an example.

Related Questions
How To Get Your Domain Unblocked From Facebook
How To Find A String In a Directory of Files Using Linux