#PKI
All CosmicBytez Labs articles tagged #PKI, across news, security advisories, how-to guides, and projects.
- News
eMudhra Revokes 8 More CA Certificates After Private Key Mishap
eMudhra revoked eight more intermediate CAs, 16 total, after a custom HSM key-migration script mishandled private keys. It is exiting public TLS issuance.
- HOWTO
Building an Internal Certificate Authority with step-ca and ACME Automation
Stand up a private PKI with Smallstep step-ca, issue short-lived certificates over ACME, and automate renewals for internal services.
- News
Mozilla, Google, Apple Block eMudhra CA Certificates After Weak Keys Cracked
Eight eMudhra intermediate CA certificates were revoked after researchers showed their P-384 private keys could be recovered almost instantly.
- News
Let's Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Let's Encrypt issues 64-day certificates by default from Feb. 10, 2027, with 45-day certs following in 2028 under CA/Browser Forum rules.
- HOWTO
OpenSSH Hardening with Certificate-Based Authentication
Replace static SSH keys with a short-lived certificate authority. Harden sshd_config, eliminate lateral-movement risk, and enforce zero-trust access...
- Project
Step-CA: Build a Private Certificate Authority for Your Homelab
Stop accepting self-signed certificate warnings. Deploy Smallstep's step-ca as a fully automated internal PKI — complete with ACME support, Traefik...
- Security
CVE-2026-9648: X.509 NameConstraints Bypass in crypton-x509-validation
A critical flaw in the Haskell crypton-x509-validation library allows TLS clients to accept certificates whose Subject Alternative Names fall outside a...
- HOWTO
HashiCorp Vault: Centralized Secrets Management for Modern
Deploy and configure HashiCorp Vault to securely store, rotate, and audit secrets across your infrastructure — covering installation, auth methods,...
- Security
CVE-2026-30836: Step CA SCEP UpdateReq Allows
A maximum-severity vulnerability in Smallstep's Step CA certificate authority allows unauthenticated attackers to issue arbitrary certificates via the...
- Project
HashiCorp Vault: Secrets Management for Your Homelab and Apps
Deploy HashiCorp Vault to centrally manage secrets, certificates, and dynamic credentials — eliminating hardcoded passwords from your infrastructure with...