Build a tiny CA for your homelab with a Raspberry Pi
Report a link problem
Submission timeline
2007–2026One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.
First comments on top threads
HN comment orderThis being raspberry pi absolves you from needing to buy a separate hardware noise generator: it has plenty of GPIO. For example, one can obtain entropy by sampling random noise generated by reverse-biasing a junction in a cheap pn transistor. Here is an example: http://holdenc.altervista.org/avalanche/. Bonus — maybe it will get you hooked on electrical engineering! Btw, some versions of raspberry pi already have hardware random number number generator accessible at /dev/hwrng.
Filippo Valsorda, from the Go security team, created mkcert some time ago → https://github.com/FiloSottile/mkcert which makes this process much easier. I setup a home laboratory for several HTTPS websites and it all works as expected without too much hassle.
Nice read
The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.
- Breakout years
- 2
- Total points
- 434
- Total comments
- 136
100+ points or 50+ comments
reference only — not used in Hall rules or ranking
reference only — not used in Hall rules or ranking
Every submission
| Date | Title as submitted | By | Points | Comments |
|---|---|---|---|---|
| 2020-12-23 | Build a tiny certificate authority for your homelabFirst breakout | fanf2 | 194 | 81 |
| 2024-05-16 | Build a tiny certificate authority for your homelab | fanf2 | 11 | 1 |
| 2025-01-19 | Build a tiny CA for your homelab with a Raspberry PiBest thread · Latest 20+ point return | timkq | 229 | 54 |