Creating a digital certificate for a service using a local certificate authority having temporary signing authority

摘要

A computing machine creates a temporary certificate authority (CA) hosted locally by the computing machine, creates a service certificate for a local service being hosted by the computing machine, and signs the service certificate using a private key of the temporary CA. The private key is stored locally on the computing machine. The computing machine removes signing authority of the temporary CA, and provides the service certificate to the local service.

主权项

1. A method comprising:
creating, by a processing device of a computing machine, a temporary certificate authority (CA) hosted locally by the computing machine; creating, by the processing device, a certificate signing request (CSR) using a locally stored private key and a locally stored public key of a local service being hosted by the computing machine; creating, by the processing device, a service certificate for the local service using the CSR; signing, by the processing device, the service certificate using a private key of the temporary CA, the private key being stored locally on the computing machine; removing, by the processing device, signing authority of the temporary CA; and providing, by the processing device, the service certificate to the local service.