Protecting SSL Private Keys in NGINX with HashiCorp Vault
Protecting SSL Private Keys in NGINX with HashiCorp Vault In the first post in this series, we describe several approaches to improving the security of your SSL private keys. The post finished with a demonstration of a remote password distribution point (PDP) used to securely share encryption passwords with NGINX instances. Secrets management systems like HashiCorp Vault operate in a similar fashion to that sample PDP: They use a central (or highly available and distributed) secrets service that is accessed using HTTPS or another API Clients are authenticated by authentication tokens or other means Tokens can be revoked as required to control access to the secret In this post, we show how to set up HashiCorp Vault to distribute SSL passwords. For even more security, you can set up an external hardware security module (HSM). This post applies to both NGINX Open [ more… ]
