TLS

Open-source projects categorized as TLS
Edit details

Transport Layer Security (TLS), the successor of the now-deprecated Secure Sockets Layer (SSL), is a cryptographic protocol designed to provide communications security over a computer network.

Language: + Go + C + Python + Shell + Rust + JavaScript
Topics: SSL HTTPS Security Certificate Golang
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Top 23 TLS Open-Source Projects

  • Caddy

    Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

    • Project mention: Why Does Windows Use Backslash as Path Separator? | news.ycombinator.com | 2024-04-24

    No, look at the associated unit test: https://github.com/caddyserver/caddy/blob/c6eb186064091c79f4...

    If that test fails we could serve PHP source code instead of having it be evaluated, a major security flaw.

  • mkcert

    A simple zero-config tool to make locally trusted development certificates with any names you'd like.

    • Project mention: Mkcert: Simple tool to make locally trusted dev certificates names you'd like | news.ycombinator.com | 2024-03-15

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • mitmproxy

    An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

    • Project mention: Ask HN: Fiddler Alternatives | news.ycombinator.com | 2024-03-14

  • OpenSSL

    TLS/SSL and crypto library

    • Project mention: Heartbleed and XZ Backdoor Learnings: Open Source Infrastructure Can Be Improved Efficiently With Moderate Funding | dev.to | 2024-04-07

    Today, April 7th, 2024, marks the 10-year anniversary since CVE-2014-0160 was published. This security vulnerability known as "Heartbleed" was a flaw in the OpenSSL cryptography software, the most popular option to implement Transport Layer Security (TLS). In more layman's terms, if you type https:// in your browser address bar, chances are high that you are interacting with OpenSSL.

  • Xray-core

    Xray, Penetrates Everything. Also the best v2ray-core, with XTLS support. Fully compatible configuration.

    • Project mention: WireGuard client that exposes itself as a HTTP/SOCKS5 proxy | news.ycombinator.com | 2024-04-01

    - [xray](https://github.com/xtls/xray-core)

  • goproxy

    🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

  • gost

    GO Simple Tunnel - a simple tunnel written in golang

    • Project mention: Teach us something Sundays | /r/ExperiencedFounders | 2023-05-21

    With a combination of Gost and cloudflare tunnel you can access literally anything on the local LAN network.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • brook

    A cross-platform programmable network tool

    • Project mention: How Brook bypass domain regardless of their IP | /r/u_txthinking | 2023-05-26

    Programming is very flexible, more can be found in documentation and other articles of this blog

  • cert-manager

    Automatically provision and manage TLS certificates in Kubernetes

    • Project mention: deploying a minio service to kubernetes | dev.to | 2024-04-08

    cert-manager

  • SoftEther

    Cross-platform multi-protocol VPN software. Pull requests are welcome. The stable version is available at https://github.com/SoftEtherVPN/SoftEtherVPN_Stable.

  • fq

    jq for binary formats - tool, language and decoders for working with binary and text formats

    • Project mention: Reverse-engineering an encrypted IoT protocol | news.ycombinator.com | 2024-02-14

    Hey! fq author here. I have a bunch of related tools in the readme https://github.com/wader/fq?tab=readme-ov-file#tools two suggestions: gnu poke and wireshark (can decode lots of more things then just network protocol)

  • Xray_onekey

    Xray 基于 Nginx 的 VLESS + XTLS 一键安装脚本

  • ecapture

    Capture SSL/TLS text content without a CA certificate using eBPF. This tool is compatible with Linux/Android x86_64/aarch64.

  • testssl.sh

    Testing TLS/SSL encryption anywhere on any port

    • Project mention: Badssl.com | news.ycombinator.com | 2024-03-02

    You’re in luck because such a tool exists :) https://testssl.sh/

  • trojan-go

    Go实现的Trojan代理，支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件，多平台，无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/

  • lego

    Let's Encrypt/ACME client and library written in Go

    • Project mention: Dehydrated: Letsencrypt/acme client implemented as a shell-script | news.ycombinator.com | 2024-04-19

    Self contained but hardly a tiny supply chain attack surface: https://github.com/go-acme/lego/blob/master/go.sum

  • certificates

    🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

    • Project mention: You shouldn't run NSA-grade Wi-Fi at home | news.ycombinator.com | 2024-01-04

    You can roll your own with https://github.com/smallstep/certificates. We maintain major open source projects and contribute a lot to other projects. I don’t think that means everything we do has to be open source. Sorry this one wasn’t. Doing this in pure open source would be a book, not a blog post.

    Love Let’s Encrypt — we’re sponsors — but using them for WiFi is a terrible idea. You need internal PKI for WiFi.

  • Ponzu

    Headless CMS with automatic JSON API. Featuring auto-HTTPS from Let's Encrypt, HTTP/2 Server Push, and flexible server framework written in Go.

  • rustls

    A modern TLS library in Rust

    • Project mention: Pingora: HTTP Server and Proxy Library, in Rust, by Cloudflare, Released | news.ycombinator.com | 2024-02-28

  • Twisted

    Event-driven networking engine written in Python.

  • boulder

    An ACME-based certificate authority, written in Go.

    • Project mention: Trying to do something a bit crazy | /r/homelab | 2023-06-04

    There's no reason you couldn't run your own ACME server (the Let's Encrypt folk publish an open source one, boulder, but there's plenty of others). Then you can just use certbot in your VMs to manage certificates, configured to point to your CA server instead of the Let's Encrypt one.

  • forge

    A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps (by digitalbazaar)

    • Project mention: Forge: Native implementation of TLS in JavaScript for web apps | news.ycombinator.com | 2024-03-24

  • mbedTLS

    An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

    • Project mention: OpenWrt 23.05 | news.ycombinator.com | 2023-10-13

    It's work in progress: https://github.com/Mbed-TLS/mbedtls/blob/development/docs/ar...

    Newer version have okay-ish support, I'd guess the next OpenWRT release will have it again.

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

TLS related posts

Index

What are some of the best open-source TLS projects? This list will help you:

Project Stars
1 Caddy 53,568
2 mkcert 45,716
3 mitmproxy 34,347
4 OpenSSL 24,142
5 Xray-core 21,809
6 goproxy 15,150
7 gost 15,085
8 brook 14,249
9 cert-manager 11,457
10 SoftEther 11,038
11 fq 9,384
12 Xray_onekey 9,194
13 ecapture 8,134
14 testssl.sh 7,628
15 trojan-go 7,390
16 lego 7,269
17 certificates 6,131
18 Ponzu 5,620
19 rustls 5,437
20 Twisted 5,416
21 boulder 4,967
22 forge 4,945
23 mbedTLS 4,898

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com