[{"data":1,"prerenderedAt":155},["ShallowReactive",2],{"project-41100564":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":15,"aspects":35,"strip":38,"post_text":40,"what":41,"said":53,"maker_in_thread":102,"shape":104,"grid":108,"attempts":118,"same_week":119,"maker_shows":33,"maker_hidden":147,"reader_version":148,"card":149},"41100564","Infisical PKI","Open-Source Private CA and Certificate Management","title","Show HN: Infisical PKI – Open-Source Private CA and Certificate Management","https:\u002F\u002Finfisical.com\u002Fdocs\u002Fdocumentation\u002Fplatform\u002Fpki\u002Fprivate-ca","infisical.com","vmatsiiako",1722261980,2024,9,5,2855,3515,82,"shown","security_privacy","private certificate authority","other",[24,25,26,27,28],"private ca","x.509 certificates","certificate management","pki","certificate revocation","curious",-0.143,{"positive":32,"neutral":33,"mixed":32,"critical":34},0,4,1,{"idea":36,"docs":37},{"positive":32,"critical":34},{"positive":32,"critical":32},[39,39,39,39,34],3,"we just released an open source PKI engine [0] as part of the wider Infisical secret management toolset. With Infisical PKI, you can:\n\n- create root and intermediary CAs; - issue and revoke x.509 certificates (with support for CRL); - encrypt TLS communication channels and authenticate users, computers, IoT devices, etc.\n\nIt is available under the MIT license as part of the main Infisical repository [1]\n\n[0] https:\u002F\u002Finfisical.com\u002Fdocs\u002Fdocumentation\u002Fplatform\u002Fpki\u002Foverview\n\n[1] https:\u002F\u002Fgithub.com\u002FInfisical\u002Finfisical",{"problem":42,"audience":48,"pricing":48,"motivation":48,"time_to_build":48,"stack":49,"openness":50,"stage":51,"team_size":52},{"value":43,"source":44,"evidence":45},"Creating, issuing and revoking certificates from private certificate authorities for TLS and authentication.","maker",[46],{"id":47},"post",null,[],"open_source","launched","unknown",{"praise":54,"objections":55,"requests":77,"questions":92,"alternatives":97},[],[56,64,70],{"value":57,"source":58,"evidence":59},"CA renewal workflow is manual and not yet automated","commenter",[60],{"id":61,"by":62,"text":63},"41100753","dangtony98","We've laid out a pretty flexible foundation for this first release of Infisical PKI. The API is fully exposed, so you'd be able to orchestrate your own CA renewal workflow as you…",{"value":65,"source":58,"evidence":66},"No migration path for existing CA hierarchies yet",[67],{"id":68,"by":62,"text":69},"41100846","Not yet but we definitely have ideas for this coming up next on the roadmap. The basic idea would be to allow you to create CAs with external\u002Fimported CA options which would…",{"value":71,"source":58,"evidence":72},"Step-CA is considered a better alternative",[73],{"id":74,"by":75,"text":76},"41103882","cvalka","Step-CA is much better",[78,85],{"value":79,"source":58,"evidence":80},"Automated CA renewal workflows",[81],{"id":82,"by":83,"text":84},"41100682","ringstar","If I have a CA hierarchy and my CA is expiring. How would y’all handle the CA renewal process for it?",{"value":86,"source":58,"evidence":87},"Import existing CA hierarchies for migration",[88],{"id":89,"by":90,"text":91},"41100738","samejr","What if I have an existing CA hierarchy in place already. Is this something I would be able to easily migrate to?",[93],{"value":94,"source":58,"evidence":95},"How CA renewal is handled when a CA expires",[96],{"id":82,"by":83,"text":84},[98],{"value":99,"source":58,"evidence":100},"Step-CA",[101],{"id":74,"by":75,"text":76},{"comments":32,"answered":32,"key":103},[],{"commenters":33,"max_depth":105,"maker_replies":32,"first_comment_mins":106,"lifespan_hours":107},2,14,7,[109,111,113,114,116],[82,32,39,110,83,32],"project\u002Fneutral\u002Fidea",[61,32,39,112,62,32],"maker\u002Fneutral\u002Fdocs",[89,34,39,110,90,32],[68,34,39,115,62,32],"maker\u002Fneutral\u002Fidea",[74,105,34,117,75,32],"project\u002Fcritical\u002Fidea",[],[120,125,129,133,138,143],{"id":121,"name":122,"points":123,"category":124},"41068719","Haystack",546,"dev_tools",{"id":126,"name":127,"points":128,"category":124},"41070428","Wat",393,{"id":130,"name":131,"points":132,"category":124},"41088273","Semantic Grep",356,{"id":134,"name":135,"points":136,"category":137},"41086620","Opslane",319,"infrastructure",{"id":139,"name":140,"points":141,"category":142},"41105130","embedding.io",305,"ai",{"id":144,"name":145,"points":146,"category":124},"41080189","gg",205,false,"v2",{"id":150,"name":5,"line":6,"ai":147,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":151,"top":18,"kw":152,"maker":11,"domain":10,"tier":19,"attempts":32,"strip":153,"url":9,"mix":154,"praise":-1,"objection":57,"sub":21},41100564,-0.14,[24,25,26,27,28],"33331",[32,33,32,34],1793991096832]