Certificate Authority Workshop – Overview
Overview
This workshop covers the path from X.509 fundamentals to operational PKI and CA security models. Its structure follows the Kubernetes workshop: documentation in docs/, four workshop levels in workshops/, exercises in exercises/, assessments and model solutions in assessments/, runnable examples in examples/, and setup helpers in scripts/.
Quickstart
# Workshop content is provided through the Orthevs Academy.
chmod +x scripts/provision_certificate_authority.sh
./scripts/provision_certificate_authority.sh --dry-run
sudo ./scripts/provision_certificate_authority.sh
openssl version
Start here:
Learning Path
| Level | Focus | Outcome |
|---|---|---|
| Fundamentals | X.509, PEM/DER, keys, CSR, certificate inspection, trust chain | You can read, inspect, and create simple lab certificates. |
| Intermediate | Root/intermediate CA, extensions, SAN, CRL, OCSP, mTLS, trust stores | You can build a private lab PKI and issue certificates in a controlled way. |
| Professional | CA operations, automation, ACME, Vault PKI, cert-manager, rotation, monitoring | You can design PKI as an operations model with evidence and runbooks. |
| Advanced + Security | Key ceremony, offline root, HSM/KMS, policy, audit, incident response, compromise | You can assess CA risks and define safe operational boundaries. |
License
Unless stated otherwise, the educational material is licensed under CC BY-NC-SA 4.0. Images and visual media under media/ are excluded and may only be displayed as part of this workshop.