Go PKI

Open-source Go projects categorized as PKI
Topics: Go TLS X509 Security ACME

Top 12 Go PKI Projects

  • certificates

    🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

  • Project mention: You shouldn't run NSA-grade Wi-Fi at home | news.ycombinator.com | 2024-01-04

    You can roll your own with https://github.com/smallstep/certificates. We maintain major open source projects and contribute a lot to other projects. I don’t think that means everything we do has to be open source. Sorry this one wasn’t. Doing this in pure open source would be a book, not a blog post.

    Love Let’s Encrypt — we’re sponsors — but using them for WiFi is a terrible idea. You need internal PKI for WiFi.

  • boulder

    An ACME-based certificate authority, written in Go.

  • Project mention: Trying to do something a bit crazy | /r/homelab | 2023-06-04

    There's no reason you couldn't run your own ACME server (the Let's Encrypt folk publish an open source one, boulder, but there's plenty of others). Then you can just use certbot in your VMs to manage certificates, configured to point to your CA server instead of the Let's Encrypt one.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • CIRCL

    CIRCL: Cloudflare Interoperable Reusable Cryptographic Library

  • Project mention: Lattice Asymetric Encryption | /r/crypto | 2023-05-22

    - https://github.com/cloudflare/circl

  • certspotter

    Certificate Transparency Log Monitor

  • Project mention: SSLMate/Certspotter: Certificate Transparency Log Monitor | news.ycombinator.com | 2023-11-02
  • sharkey

    Sharkey is a service for managing certificates for use by OpenSSH

  • labca

    A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).

  • ct-woodpecker

    A tool to monitor a certificate transparency log for operational problems

  • Project mention: I looked through attacks in my access logs. Here's what I found | news.ycombinator.com | 2024-01-28

    Was looking into Certificate Transparency logs recently. Are there any convenient tools/methods for querying CT logs? i.e. search for domains within a timeframe

    Cloudflare’s Merkle Town[0] is useful for getting overviews, but I haven’t found an easy way to query CT logs. ct-woodpecker[1] seems promising, too

    [0] https://ct.cloudflare.com/

    [1] https://github.com/letsencrypt/ct-woodpecker

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • crlite

    WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade

  • vaultplugin-hsmpki

    The Vault HSM PKI plugin overlays the modifications to the builtin PKI plugin that enable support for certificate signing using a Hardware Security Module via PKCS#11.

  • certin

    Go lib (and CLI) for quick creation of TLS keys and certificates for use in tests

  • yubisigner

    YubiSigner provides a convenient way to sign and securely verify file signatures with Yubico YubiKey, utilizing an organization's PKI infrastructure.

  • pkisauce

    Ephemeral One Time/Build-Time gRPC TLS PKI system.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go PKI related posts

Index

What are some of the best open-source PKI projects in Go? This list will help you:

Project Stars
1 certificates 6,131
2 boulder 4,967
3 CIRCL 1,175
4 certspotter 913
5 sharkey 390
6 labca 280
7 ct-woodpecker 170
8 crlite 59
9 vaultplugin-hsmpki 18
10 certin 10
11 yubisigner 7
12 pkisauce 6

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com