Differences

This shows you the differences between two versions of the page.

--- hosts:virtual_machines:enclave:smallstep_ca [2023/02/21 01:32] – removed - external edit (Unknown date) 127.0.0.1
+++ hosts:virtual_machines:enclave:smallstep_ca [2023/02/23 01:45] (current) – tcmal
@@ Line 1: / Line 1: @@
+[[meta:autogen:start|]]
+===== Smallstep CA =====
+^ Name | Smallstep CA |
+^ Ports | 443 (tcp) |
+^  | [[https://netbox.tardisproject.uk/ipam/services/17/|View in NetBox.]] |
+[[meta:autogen:end|]]
+Provides internal certificates through ACME. As our network is trusted, this is mostly unused, and only exists for a few services that refuse to run properly without .
+===== Data directories =====
+  * ''/var/lib/step-ca/''
+Here is our CA certificate:
+<code>
+-----BEGIN CERTIFICATE-----
+MIIBlzCCAT2gAwIBAgIQEcmEsApMPiF6dPsDH6kTBTAKBggqhkjOPQQDAjAqMQ8w
+DQYDVQQKEwZUQVJESVMxFzAVBgNVBAMTDlRBUkRJUyBSb290IENBMB4XDTIyMDky
+MzEyNTQ0N1oXDTMyMDkyMDEyNTQ0N1owKjEPMA0GA1UEChMGVEFSRElTMRcwFQYD
+VQQDEw5UQVJESVMgUm9vdCBDQTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABK8C
+gt7UMC38QlJkUP0kMBKUYaAsURqEDQwWSUO+IfcMDVellwlB/x9vlVadlN7DaWFa
+YxV9pZ+Lfa+AfO57JFqjRTBDMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAG
+AQH/AgEBMB0GA1UdDgQWBBSNPkp/zPziiJMbV8ePJOw0IdcZETAKBggqhkjOPQQD
+AgNIADBFAiEAv/DpsYXAKbgpT2UGavkEqIKkmNk3p4Hp7rQQDb4CihYCIBJg1KHr
+NJUNX54vDKcfosJVtz8OwYZSvMdGmdLVlceE
+-----END CERTIFICATE-----
+</code>
+===== Configuration locations =====
+Handled declaratively by [[https://git.tardisproject.uk/tardis/nix/-/tree/main/profiles/services/pki|Nix]]