
Switching From Let's Encrypt to Actalis
In my ongoing efforts to reduce the reliance on US companies and services, I decided from Let’s Encrypt to the Italian Actalis. Sure, Let’s Encrypt works fine, is non-profit and had a huge impact on today’s internet security, but nonetheless it is still US based and required to comply with US law and government requests. This could also include breaking the chain of trust for certificates while prohibiting to share this information with the public. Actalis, on the other hand, complies to European laws, regulations and standards. I operate a Kubernetes cluster with cert-manager and DNS01 challenges. Actalis provides these too, making the switch fairly easy. Create an Actalis account. Copy your ACME Key ID and the HMAC. Create a new secret in Kubernetes with these values. Create a new Issuer or ClusterIssuer in Kubernetes, referencing the secret created in step 3. Reference the new issuer in your Certificate resources. --- apiVersion: v1 kind: Secret metadata: name: actalis-eab namespace
Continue reading on Dev.to DevOps
Opens in a new tab


