CFSSL vs Step CA for private PKI

• cfssl

  24 8,457 7.5 Go

  CFSSL: Cloudflare's PKI and TLS toolkit

  

I'm currently conflicted which pki tool I should invest time into either: - CloudFlare's PKI/TLS toolkit CFSSL - Smallstep's Step CA

• certificates

  40 6,154 9.5 Go

  🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

  

I'm currently conflicted which pki tool I should invest time into either: - CloudFlare's PKI/TLS toolkit CFSSL - Smallstep's Step CA

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• easy-rsa

  26 3,881 9.4 Shell

  easy-rsa - Simple shell based CA utility

  

I need a pki for a hobby/side project which involves Golang and I would also like to utilize ed25519, nothing less. I have experience with setting up a two tier pki AD CS in a Windows domain. I have not only read into cfssl and step ca, but also EasyRSA and EJBCA. EasyRSA seems overkill and does not involve Golang, but I can be convinced otherwise. EJBCA failed for me, because it needed systemd, which means an extra server/vm just for running it.

Suggest a related project