Automatic csr sending In our project we have grpc server and clients which should satisfy mutual tls. So, there is CA and clients generate csr to sent to CA to signing it. Now I need to send csr manually to CA to sign it and also manually back to clients. If there are many clients, it becomes inconvenient.
Of course, I can add an additional server that will receive requests and send back, but I think that this is a complication and I am trying to find a generally accepted scheme.
I am new in this theme. How to organize it correctly? Or use a simple ready-made solution.
The ACME protocol was designed by the Internet Security Research Group, and is used by Let's Encrypt to sign domain-validation TLS certificates. Since the transport of GRPC is HTTP/2, which uses TLS for encryption and authentication (when enabled) that should be what you want.