I have been needing for a long time to create a Certificate Authority so that I will not be using self signed certificates and simply avoiding the checks on various equipment. This needs to change so that it provides a measure of security in the HomeLab that makes sense.
There have been a number of articles about creation of a Certificate Authority, however one in particular seems to be the one that I could use best. The reason is that it provides intermediate certificate authorities. That article is at https://jamielinux.com/docs/openssl-certificate-authority/index.html. I have made a pdf of that site to work its magic.
Obviously, this will require me to make some modifications to make it easier to accomplish, such as using some scripts for the process. I might also make use of an ACME like internal Certificate Authority to automatically update the certificates. Note that this is in addition to the certificates already created in the Tailscale VPN implementation.
