A walkthrough for setting up a private Certificate Authority using the smallstep/step-ca package on Fedora. Covers the fundamentals of public-key cryptography, how browsers trust CAs, the inherent MITM risks in the CA trust model, creating a private .FEDORA TLD via /etc/hosts, generating a root CA with OpenSSL, signing an
Table of contents
How Public Keys Prevent Man-In-The-Middle AttacksHow Mainstream Browsers Know Which CAs to TrustCreate a private TLD with bindRun a private CA with step-caUse httpd to serve hello.fedora web pageUse acme-tiny to sign a TLS cert with step-caUse a browser to display the web pageSort: