Mastering Service Mesh

Creating step root and intermediate certificates

We will now generate the root key and certificate and set up an intermediate certificate authority and validate its duration:

1. Create a root certificate:

$ kubectl -n step exec -t step-0 -- step certificate create --profile root-ca "My Root CA" root-ca.crt root-ca.key --no-password --insecure --forceYour certificate has been saved in root-ca.crt.Your private key has been saved in root-ca.key.

Note that, for simplicity, we are not providing a password to encrypt the key. In real life, you should use a password or let step generate one for you. Protecting the private key is very important for root and intermediate certificates.

2. Then, create an intermediate CA:

$ kubectl -n step exec -t ...