rgca

Experiment in SSL CA management. (by linsomniac)
Add to my DEV experience Suggest topics
Source Code
rgca Reviews
Suggest alternative
Edit details
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Rgca Alternatives

Similar projects and alternatives to rgca

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better rgca alternative or higher similarity.
Suggest an alternative to rgca

rgca reviews and mentions

Posts with mentions or reviews of rgca. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-09-16.
  • Running one’s own root Certificate Authority in 2023
    12 projects | news.ycombinator.com | 16 Sep 2023
    Shameless plug, there's also https://github.com/linsomniac/rgca

    I've been using it at work for the last year for our certs and it's been quite nice. It can do pre/post hooks as well, so it directly commits the updated CA serial files to our git repo.

  • Ask HN: Tools you have built for yourself?
    17 projects | news.ycombinator.com | 23 Jan 2023
    I built a TLS certificate tool targeted towards my company usecase for internal certificates (developers, OpenVPN, internal certificates): https://github.com/linsomniac/rgca

    It's big features are that the cert generation can entirely be controlled from the command line, config, or environment, or any combination of the above, and it has tooling for the situation where I have an existing cert but want to add or remove a name from it. It also has pre/post scripts so I can have it do things like add it to the Ansible repo, vault encrypt it, and commit it. Beats the 10+ year old script that didn't work with Subject Alt Names.

  • Do you guys use Python classes in your day-to-day devops code?
    1 project | /r/devops | 4 Oct 2022
    Over the last year I've written several CLIs in click and typed and settles on typer because there's a little less repetition. Typer let me do some really nice things in my certificate generation tool like chaining multiple config files, the environment, and the command line to create certs. https://github.com/linsomniac/rgca
  • Ask HN: What Are You Working On? (September 2022)
    1 project | news.ycombinator.com | 1 Sep 2022
    I've always found the OpenSSL tools painful for managing internal self-signed certificates. At work we make fairly heavy use of them, and are starting to make even heavier use. Our use is more than EasyRSA can provide. So I've been working on a new CA tool:

    https://github.com/linsomniac/rgca

    In a nod to OpenSSL config files, it can take almost all values: from the command line, from the environment, or from one or more config files. It also allows "pre" and "post" commands so you can run a script after generating the cert, for example for server certs I have a "post" script that will copy it into the appropriate location in the Ansible repo, encrypt the key file, and commit it all.

    I still need to implement a "renew" which will take an existing cert, update the expiration date, but also allow adding/removing SANs, possibly other features. But I've been using it to generate all our certs recently and it's working great.

  • Feedback on a Self-signed SSL CA?
    2 projects | /r/devops | 11 Jun 2022
    At work we use self-signed certificates for internal and developer use. I inherited some scripts that wrapped the openssl CLI but weren't supporting new uses like the prevalence of Subject Alternatives Names. So I reimagined it and have published what I have so far here: https://github.com/linsomniac/rgca With an appropriate config file, the typical use would be: rgca ca new example.com rgca cert new user1.example.com rgca cert new --san test.example.com --san test2.example.com user2.example.com Basically everything can be configured by settings in (possibly multiple) config files, environment variables, and CLI options. Expected use is that things like the subject values (country, state, locality, email) are set in the config file, so the CLI can be short. Instead of: rgca cert new --C US --ST Colorado --L Fort Collins [...] It should be compatible with existing CA setups with OpenSSL CLI tools, it writes the "serial" and "index.txt" files. Looking for feedback on the direction this is going in. Thanks!
  • If OpenSSL Were a GUI
    3 projects | news.ycombinator.com | 10 Jun 2022
    It can also run pre and post scripts to, say update your serial/index in git, and deploy keys to the server, say you are rekeying every 30 days...

    Interested in feedback.

    https://github.com/linsomniac/rgca

  • A note from our sponsor - WorkOS
    workos.com | 24 Apr 2024
    The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Stats

Basic rgca repo stats
6
2
0.0
over 1 year ago

linsomniac/rgca is an open source project licensed under Creative Commons Zero v1.0 Universal which is not an OSI approved license.

The primary programming language of rgca is Python.

Popular Comparisons

  1. rgca VS hckrweb
  2. rgca VS pashword
  3. rgca VS cfssl
  4. rgca VS gitgrep
  5. rgca VS daemon
  6. rgca VS hackerer-news
  7. rgca VS MagLit
  8. rgca VS lego
  9. rgca VS easy-rsa
  10. rgca VS mkcert

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com