Top 11 Go certificate-authority Projects

certificates

40 6,154 9.5 Go

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Project mention: You shouldn't run NSA-grade Wi-Fi at home | news.ycombinator.com | 2024-01-04

You can roll your own with https://github.com/smallstep/certificates. We maintain major open source projects and contribute a lot to other projects. I don’t think that means everything we do has to be open source. Sorry this one wasn’t. Doing this in pure open source would be a book, not a blog post.
Love Let’s Encrypt — we’re sponsors — but using them for WiFi is a terrible idea. You need internal PKI for WiFi.

boulder

11 4,981 9.6 Go

An ACME-based certificate authority, written in Go.

Project mention: Trying to do something a bit crazy | /r/homelab | 2023-06-04

There's no reason you couldn't run your own ACME server (the Let's Encrypt folk publish an open source one, boulder, but there's plenty of others). Then you can just use certbot in your VMs to manage certificates, configured to point to your CA server instead of the Let's Encrypt one.

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
certstrap

8 2,207 2.1 Go

Tools to bootstrap CAs, certificate requests, and signed certificates.

Project mention: Selfhosted CA tutorial | /r/selfhosted | 2023-05-14

cashier

3 688 8.2 Go

A self-service CA for OpenSSH
labca

4 287 8.5 Go

A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).
paranoia

3 217 6.1 Go

Inspect certificate authorities in container images (by jetstack)
letsdane

6 102 3.4 Go

🔒 Let's DANE is an experimental way to enable the use of DANE/TLSA in browsers and other apps using a lightweight proxy.

Project mention: Handshake Privacy VPN and Tor | /r/handshake | 2023-05-08

The easiest way to do this is to use letsdane https://github.com/buffrr/letsdane

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
certonid

1 74 6.1 Go

Certonid is a Serverless SSH Certificate Authority
certify

1 44 5.8 Go

:lock: Create private CA and Issue Certificates without hassle (by nothinux)
btlink

7 29 3.4 Go

a HTTP(s) addressing scheme for BitTorrent

Project mention: Willow Protocol | news.ycombinator.com | 2024-01-17

Consider https://github.com/anacrolix/btlink. It's a proof of concept, and has all the basics. I designed it and I worked for IPFS, and I am the maintainer of a popular DHT and BitTorrent client implementation.

devcert

2 12 3.4 Go

Generate self-signed, trusted certificates for local development. (by primalskill)

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).