cfssl
certify
| cfssl | certify | |
|---|---|---|
| 24 | 41 | |
| 8,473 | 1,450 | |
| 0.8% | 0.6% | |
| 7.5 | 9.6 | |
| 9 days ago | 7 days ago | |
| Go | C# | |
| BSD 2-clause "Simplified" License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
cfssl
- Running one’s own root Certificate Authority in 2023
- Selfhosted CA tutorial
-
i must be the only guy that understands certificates
cfssl is kinda outright better version of that.
-
SSL certificate problem: unhandled critical extension
The Cloudflare SSL tools at https://github.com/cloudflare/cfssl might help. Here's what it shows for one of the example Snake Oil certs:
-
Private CA management
I've used this in the past and it worked great. https://github.com/cloudflare/cfssl
- Linux Certificate Authority root stores have a too simple view of 'trust'
- Creating an internal Certificate Authority in 2022 that is accepted by modern web browsers.
-
How to create users in Kubernetes
The first step is to create the source key that represents our user. This key is created using a tool like openssl but another popular tool to use is cfssl, created by Cloudflare. Some folks think cfssl is easier to use, and it definitely looks easier to script. But for this example we will use openssl. You can also choose to create the key using a number of different algorithms. For this example we will use ED25519.
-
[Legal notice] IoT Core will be discontinued on Aug. 16, 2023
TLS/SSL worked well with client certificates generated by the CFSSL API.
-
Feedback on a Self-signed SSL CA?
Not sure if relevant but we used tooling from CloudFlare in the past: https://github.com/cloudflare/cfssl
certify
-
Seeking Guidance: SSL Certification for a Local Server in Windows 2019 Data Center Environment
Option 2+: If your public DNS is hosted by a provider that has Win-ACME or Certify the Web support, use Let's Encrypt and automate the whole thing.
- Renew SSL Exchange 2016 - cmdlet
-
Google Pushing For 90 Day SSL/TLS Certificates - Time For Automation
I use certify the web for the rd gateway
-
How will you handle 90 day SSL expiration?
For Exchange and Remote Desktop Service we are using Certify The Web with Lets Encrypt. Works really well.
-
SSL Certificates, who's responsibility to maintain on server?
Certify the Web: https://certifytheweb.com/
- LDAPS Certificate auto-renews but not to NTDS Personal Store
-
Is open source really a gimmick these days for getting initial traction?
https://certifytheweb.com Felt like a complete bait-and-switch to me.
- Exchange 2019 Hybrid Certificate Renewal
-
DigiCert Certificate Management
If you're managing Windows Servers and need certificates on them, ditch what you're doing and get this: https://certifytheweb.com
-
Ask HN: What are your “scratch own itch” projects?
It's worth doing! A few projects I've done:
I once needed a database of EV charging locations, but at the time(2011) there were no open databases, so I built https://openchargemap.org, that now serves millions of API queries per month for other apps and services
For another project, I recently wanted to control my guitar amp (a Positive Grid Spark) from my computer instead of using a mobile app, so I built https://soundshed.com which is both a bluetooth web app and an electron app you can install. It now has a few thousand users :)
And finally, another time I had some SSL certificates I needed to manage for another project (for the above mentioned https://openchargemap.org), so I built a GUI to manage and renew certificates on Windows. It's now a commercial app with hundreds of thousands of users and it's my full time job: https://certifytheweb.com
So yeah, worth doing!
What are some alternatives?
OpenSSL - TLS/SSL and crypto library
win-acme - A simple ACME client for Windows (for use with Let's Encrypt et al.)
easy-rsa - easy-rsa - Simple shell based CA utility
Nginx Proxy Manager - Docker container for managing Nginx proxy hosts with a simple, powerful interface
LetsEncrypt-PRTG - Post request script to install an SSL certificate obtained with Certify the Web or win-acme in PRTG.
Posh-ACME - PowerShell module and ACME client to create certificates from Let's Encrypt (or other ACME CA)
acme.sh - A pure Unix shell script implementing ACME client protocol
certificates - 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
acme-dns - Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.