Enterprise-wide SSL Automation w/Lemur + CloudCA
summary
Heartbleed forces reissue of hundreds of certificates and reveals no visibility or tooling, so Lemur + CloudCA appear as an orchestration stack that actually works: Lemur centralizes inventory and expiration notifications, creates private keys and CSRs for users, exposes an API-first UI and plugin model, and auto-deploys certs to AWS destinations; CloudCA provides lightweight internal CA hierarchies. The system is vendor‑agnostic, reduces developer mistakes via central key generation and succeeded at Netflix enough to be open sourced.
AI-written summary · about
chapters (6)
related talks
31mHow We Solved TLS at Scale: Self-Service, Multi-Tenant Cert-manager
49mHerding Certs - How to Automate Certificate Management
06mKeynote: Ten Years as a Free, Open, and Automated Certificate Authority
31mPractical TLS Advice for Large Infrastructure
27mScaling Trust: CLM Roadblocks on the Path to Post Quantum Resilience
10mLightning Talk: Your Wish Is Our Command: Declarative Certificate Management in a...
42mLet's go HTTPS
20mBring development closer to production with valid HTTPS certificates