Smallstep

This post sets up a separate workstation to sign IoT device (client) certificates and return a single leaf PEM per […]

Short version: install Smallstep’s step-ca, initialize a Root + Intermediate CA, move it under /etc/step-ca, and run it securely with