This is small howto for star playing with jails in freeBSD.

This is part one of few posts about kubernetes… If you don’t know what kubernetes is, then you probably came here by mistake… I’ll make simple setup, with one master and one worker node, connected by WireGuard VPN (it seems that it still isn’tk finished/stable/tested enough, but should probably be OK for this setup?), using Flannel for semi-automatic network configuration between nodes in cluster. For more info check their github page and kubernetes page about cluster networking.

If you followed previous posts, you should now have working cfssl configuration and server. All that is left is how to revoke certificates and running OCSP responder to verify certificates.

If you followed previous post, you should now have working cfssl configuration. Next step is to setup OCSP and API servers for revoking and issuing certificates with REST endpoints.

I have smartOS server at home with few (dozen) virtual machines, and was thinking that centralized PKI server would be a good thing, so I tried to create my own solution in go, and it worked, in a basic mode, but anything more would be a lot of work… So, my attention was moved to CloudFare SSL toolkit which, at first, looked complicated and too big for my needs… But, in the end I gave it a try.