PKI as a Service with Vault by HashiCorp

Creating and renewing TLS certificates is a tedious and boring task when done manually. It can be automated by using Let’s Encrypt for example but in an Enterprise environment, where you have your own CA, that’s maybe not an option any more. In this article we’ll share a workflow which leverage HashiCorp Vault to automate TLS certificate provisioning, revocation and renewal. It allows us to offer a PKI as a Service solution to our applications and users, they’ll get a self service API endpoint where they can get, renew and revoke their TLS certificates. ...

October 4, 2018 · 14 min · planetrobbie

Bootstrap YET infrastructure using Opscode Chef - part 1

In this article, we will details all the required steps to build up an environment to host the previous incarnation of this blog on Nginx using Chef on HP Cloud. Twelve years later the world has changed and this blog is now hosted on a bare metal machine in Germany. Chef Repo cloning First of all, if you don’t already have a Chef Repository available on your Chef Workstation, you can clone one easily : ...

December 1, 2012 · 6 min · planetrobbie