Configuring MAAS as Certificate Authority

I’ve been using MAAS to manage a lot recently and was thinking about adding CA roll to it as well.
Before I get started, regarding using openssl cli and I have done that before and when you are managing a lot of different certificates the process is not very scalable. Also, if you don’t keep doing it, you have to re-trace your steps to remember how the setup works.
So I want to figure out how to add a WebGUI of sorts to maas to manage certs for me, this would work great as maas could issue certs automatically as part of the commissioning/deployment process.
Failing that I’m looking for any WebGUI I can add that will not conflict with maas. It seems since ubuntu moved to netplan in 18.04(LTS), that some of the utilities that I might have used before break maas on install.
Looking for some suggestions.

Hi @nathan-flowers,

you can try Hashicorp Vault you can issue certificate from there using API:
https://www.vaultproject.io/api-docs/
hope this helps.

Best,
Stefan

@tension183

Hi @nathan-flowers,

you can try Hashicorp Vault you can issue certificate from there using API:
https://www.vaultproject.io/api-docs/
hope this helps.

Best,
Stefan

Thank you very much for your time and kind response. I’ve had no luck deploying vault and as such it’s not an option right now. Besides vault can be set up as a CA or needs to be signed by one. I need an external to my deployments CA for longevity.

See my post here:

and here: