Mastering Service Mesh

Generating private key, server, and root certificates

Normally, you obtain a certificate from an established CA provider such as GeoTrust, DigiCert, GlobalSign, or GoDaddy when you want to establish that a certificate that has been issued to a computer name is legitimate to prevent a man-in-the-middle attack. The scope of issuance of the certificate is done using the name of the service using a service mesh implementation; we can either get a root certificate signed from an established provider or use our own root and intermediate certificate to issue certificates. To show this concept, we will use a simple to use open source smallstep.com way of using our own CA:

1. Create a directory and create a root certificate using root --profile by using ...