Get the latest tech news
Offline PKI using 3 Yubikeys and an ARM single board computer
Setup of an offline PKI system with 3 YubiKeys and a Libre Computer Sweet Potato ARM64 SBC. This may contain some traces of Nix.
An offline PKI enhances security by physically isolating the certificate authority from network threats. To ensure the operations on the root and intermediate CAs are air-gapped, a cost-efficient solution is to use an ARM64 single board computer. a package for the offline-pki application, with shell completion, a development shell, including an editable version of the offline-pki application, a NixOS module to setup the offline PKI, resetting the system at each boot, a QEMU image for testing, and an SD card image to be used on the Sweet Potato or an ARM64 SBC.
Or read this on Hacker News