zlint
mod_md
| zlint | mod_md | |
|---|---|---|
| 3 | 3 | |
| 342 | 330 | |
| 2.3% | - | |
| 8.7 | 6.6 | |
| 5 days ago | 28 days ago | |
| Go | C | |
| Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
zlint
-
Let's Encrypt Acme API Outage
Yup, the two most popular are:
https://github.com/zmap/zlint
https://github.com/certlint/certlint
They each have their strengths and weaknesses, so CAs are advised to use both.
- zlint: X.509 Certificate Linter focused on Web PKI standards and requirements.
-
Introducing Certomancer: the Python X.509 testing framework.
Can you compare it with https://github.com/zmap/zlint as a cert linter?
mod_md
-
Ask HN: What should a Alternative to LetsEncrypt offer
There's already other CAs that (optionally) use ACME to issue. As I understand it from the mod_md readme [1], Buypass basically works (without must staple), Sectigo and ZeroSSL work too, but require an account to be setup.
Are these true alternatives? If not, why not? I don't know where these companies reside.
[1] https://github.com/icing/mod_md?tab=readme-ov-file#known-iss...
-
Let's Encrypt Acme API Outage
Apache mod_md has fallback too, https://github.com/icing/mod_md#acme-failover I'm just a user, not the author, and I didn't try the fallback. I'm more worried about stuff breaking if I switch issuers than certs expiring without me noticing. I've got some embedded junk that hits my website and has weak cert validation, so better to stick with something that works.
-
Making my websites work as http(s)
Add mod_md to your apache configuration
What are some alternatives?
cli - 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
bitnami-docker-apache - Bitnami Docker Image for Apache
certificate-transparency - Auditing for TLS certificates.
Apache - Mirror of Apache HTTP Server. Issues: http://issues.apache.org
go-guardian - Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
certlint - X.509 certificate linter
yaac - Yet another ACME client: a decoupled LetsEncrypt client
certomancer - Quickly construct, mock & deploy PKI test configurations using simple declarative configuration.
Crypt-LE - Crypt::LE - Let's Encrypt / Buypass / ZeroSSL and other ACME-servers client and library in Perl for obtaining free SSL certificates (inc. generating RSA/ECC keys and CSRs). HTTP/DNS verification is supported out of the box, EAB (External Account Binding) supported, easily extended with plugins, easily dockerized.
acmetool - :lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
HandyAcme - A TypeScript Client implements ACME (RFC 8555)