Post #2563457

@ryanc@infosec.exchange @owen@mastodon.transneptune.net I mean I have my own local CA with two different intermediate CAs, but I also run my own DNS. And I need the CA to issue client certificates to VPN clients (I have a ban on password authentication, to the extent supported by the service, for anything network reachable). Once you have that infrastructure in place also issuing your own HTTPS certs is straightforward enough. But it's certainly not something the average person wants to deal with.