Top 23 certificate-authority Open-Source Projects

• certificates

  40 6,154 9.5 Go

  🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

  

Project mention: You shouldn't run NSA-grade Wi-Fi at home | news.ycombinator.com | 2024-01-04

You can roll your own with https://github.com/smallstep/certificates. We maintain major open source projects and contribute a lot to other projects. I don’t think that means everything we do has to be open source. Sorry this one wasn’t. Doing this in pure open source would be a book, not a blog post.

Love Let’s Encrypt — we’re sponsors — but using them for WiFi is a terrible idea. You need internal PKI for WiFi.

• boulder

  11 4,981 9.6 Go

  An ACME-based certificate authority, written in Go.

  

Project mention: Trying to do something a bit crazy | /r/homelab | 2023-06-04

There's no reason you couldn't run your own ACME server (the Let's Encrypt folk publish an open source one, boulder, but there's plenty of others). Then you can just use certbot in your VMs to manage certificates, configured to point to your CA server instead of the Let's Encrypt one.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• certstrap

  8 2,207 2.1 Go

  Tools to bootstrap CAs, certificate requests, and signed certificates.

  

Project mention: Selfhosted CA tutorial | /r/selfhosted | 2023-05-14

• xca

  4 1,346 9.3 C++

  X Certificate and Key management

Project mention: (StarLAN) Personal Home Lab | /r/homelab | 2023-07-22

XCA PKI (https://github.com/chris2511/xca) Local Certificate Authority software used for generating internal CA and SSL certs. All of my HTTPS interfaces in my lab have the magic green padlock. I did this for no other reason than to learn more about how to manage and deploy SSL certificates also, the Chrome security warnings are really annoying.

• FreeIPA

  13 920 9.4 Python

  Mirror of FreeIPA, an integrated security information management solution

  

Project mention: Non-interactive SSH password authentication | news.ycombinator.com | 2023-12-25

• docker-nginx-certbot

  2 854 7.7 Shell

  Automatically create and renew website certificates for free using the Let's Encrypt certificate authority.

• cashier

  3 688 8.0 Go

  A self-service CA for OpenSSH

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• mutual-tls-ssl

  13 540 5.8 Java

  🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttp

• pki

  2 318 9.8 Java

  The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

  

• labca

  4 287 8.5 Go

  A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).

• paranoia

  3 217 6.1 Go

  Inspect certificate authorities in container images (by jetstack)

  

• stecCA

  1 140 0.0 Shell

  An easy to deploy Certificate Authority / Public Key Infrastructure using CFSSL, Lemur and Docker magic!

• acme2certifier

  2 140 9.5 Python

  library implementing ACME server functionality

• django-ca

  1 134 9.7 Python

  Django app providing a Certificate Authority

• beacon

  10 131 0.0 C++

  Beacon browser for desktop (by imperviousinc)

  

• active-directory-lab-hybrid-adfs

  1 125 0.0 PowerShell

  Create a full AD/CA/ADFS/WAP lab environment with Azure AD Connect installed

  

• letsdane

  6 102 3.4 Go

  🔒 Let's DANE is an experimental way to enable the use of DANE/TLSA in browsers and other apps using a lightweight proxy.

Project mention: Handshake Privacy VPN and Tor | /r/handshake | 2023-05-08

The easiest way to do this is to use letsdane https://github.com/buffrr/letsdane

• win-ca

  1 99 3.4 LiveScript

  Get Windows System Root certificates

• cert-gen

  1 85 0.0 Shell

  Generate CA and self-signed SSL certificates usable in your browser for local development.

  

• certonid

  1 74 6.1 Go

  Certonid is a Serverless SSH Certificate Authority

  

• TameMyCerts

  1 63 3.3 C#

  Policy Module for Microsoft Active Directory Certificate Services

• awesome-pki

  1 44 3.9

  A collection of articles, manuals, research papers, blogs, videos and software somehow related to the Public Key Cryptography (PKI).

• certify

  1 44 5.8 Go

  :lock: Create private CA and Issue Certificates without hassle (by nothinux)

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

certificate-authority related posts

• Trying to do something a bit crazy

  1 project | /r/homelab | 4 Jun 2023

• Selfhosted CA tutorial

  3 projects | /r/selfhosted | 14 May 2023

• Handshake Privacy VPN and Tor

  1 project | /r/handshake | 8 May 2023

• How does the cert based authentication work?

  1 project | /r/MQTT | 25 Apr 2023

• How do you guys handle your PKI?

  1 project | /r/sysadmin | 15 Apr 2023

• Any tool can do Let’s Encrypt PKI/CA but for internal systems (no public DNS) ?

  3 projects | /r/selfhosted | 10 Apr 2023

• Looking for an open source certificate management solution.

  2 projects | /r/HomeServer | 23 Feb 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 1 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com