X509

Open-source projects categorized as X509
Edit details
Language: + Go + Python + C++ + C + PHP + JavaScript + Java + Rust + PowerShell + LiveScript + C#
Topics: TLS Certificate Cryptography SSL Security
Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
Sponsored

Top 23 X509 Open-Source Projects

  • certificates

    šŸ›”ļø A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

    • Project mention: You shouldn't run NSA-grade Wi-Fi at home | news.ycombinator.com | 2024-01-04

    You can roll your own with https://github.com/smallstep/certificates. We maintain major open source projects and contribute a lot to other projects. I donā€™t think that means everything we do has to be open source. Sorry this one wasnā€™t. Doing this in pure open source would be a book, not a blog post.

    Love Letā€™s Encrypt ā€” weā€™re sponsors ā€” but using them for WiFi is a terrible idea. You need internal PKI for WiFi.

  • PHPSecLib

    PHP Secure Communications Library

    • Project mention: How to install software on VPS through PHP? | /r/PHP | 2023-10-24

    I recommend using PHPSecLib which has a powerful SSH library that is far more versatile than the official PHP SSH extension.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • forge

    A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps (by digitalbazaar)

    • Project mention: Forge: Native implementation of TLS in JavaScript for web apps | news.ycombinator.com | 2024-03-24

  • cli

    šŸ§° A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc. (by smallstep)

    • Project mention: Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30 | news.ycombinator.com | 2024-01-18

    https://github.com/smallstep/cli implements some OAuth flows from the CLI, it may be helpful for you.

  • Botan

    Cryptography Toolkit

    • Project mention: Ask HN: What are some of the most elegant codebases in your favorite language? | news.ycombinator.com | 2023-06-17

  • acmetool

    :lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

  • xca

    X Certificate and Key management

    • Project mention: (StarLAN) Personal Home Lab | /r/homelab | 2023-07-22

    XCA PKI (https://github.com/chris2511/xca) Local Certificate Authority software used for generating internal CA and SSL certs. All of my HTTPS interfaces in my lab have the magic green padlock. I did this for no other reason than to learn more about how to manage and deploy SSL certificates also, the Chrome security warnings are really annoying.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • certigo

    A utility to examine and validate certificates in a variety of formats

  • certspotter

    Certificate Transparency Log Monitor

    • Project mention: SSLMate/Certspotter: Certificate Transparency Log Monitor | news.ycombinator.com | 2023-11-02

  • certificate-ripper

    šŸ” A CLI tool to extract server certificates

    • Project mention: Certificate Ripper v2.2.0 released - tool to extract server certificates | /r/linuxadmin | 2023-10-26

    Link: https://github.com/Hakky54/certificate-ripper/releases

  • go-guardian

    Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.

  • webpki

    WebPKI X.509 Certificate Validation in Rust

  • PSPKI

    PowerShell PKI Module

    • Project mention: AD CS management tools | /r/sysadmin | 2023-06-20

    For my scope the PS module is enough. https://github.com/PKISolutions/PSPKI

  • zlint

    X.509 Certificate Linter focused on Web PKI standards and requirements.

    • Project mention: Let's Encrypt Acme API Outage | news.ycombinator.com | 2023-06-15

    Yup, the two most popular are:

    https://github.com/zmap/zlint

    https://github.com/certlint/certlint

    They each have their strengths and weaknesses, so CAs are advised to use both.

  • openssl

    Fork of OpenSSL 1.1.1 that includes prototype quantum-resistant algorithms and ciphersuites based on liboqs [OQS-OpenSSL 1.1.1 is NO LONGER SUPPORTED, please switch to OQS-Provider for OpenSSL 3] (by open-quantum-safe)

  • tls-scan

    An Internet scale, blazing fast SSL/TLS scanner ( non-blocking, event-driven )

  • ssl-checker

    Python script that collects SSL/TLS information from hosts

  • ct-woodpecker

    A tool to monitor a certificate transparency log for operational problems

    • Project mention: I looked through attacks in my access logs. Here's what I found | news.ycombinator.com | 2024-01-28

    Was looking into Certificate Transparency logs recently. Are there any convenient tools/methods for querying CT logs? i.e. search for domains within a timeframe

    Cloudflareā€™s Merkle Town[0] is useful for getting overviews, but I havenā€™t found an easy way to query CT logs. ct-woodpecker[1] seems promising, too

    [0] https://ct.cloudflare.com/

    [1] https://github.com/letsencrypt/ct-woodpecker

  • secret_handshake

    A prototype malware C2 channel using x509 certificates over mTLS

  • win-ca

    Get Windows System Root certificates

  • lokey

    A tool that makes it easy to work with and convert between cryptographic key formats

  • CryptoNet

    CryptoNet is simple, fast and a lightweight asymmetric and symmetric encryption library.

  • showcert

    Simple OpenSSL for humans: all you need for X.509 TLS certificates (and nothing more).

    • Project mention: Your own Certificate Authority (CA) in ONE simple command | dev.to | 2024-01-29

    Showcert is OpenSSL for humans, much simpler to use and it has gencert utility to generate certificates. Very easy.

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

X509 related posts

Index

What are some of the best open-source X509 projects? This list will help you:

Project Stars
1 certificates 6,131
2 PHPSecLib 5,247
3 forge 4,945
4 cli 3,478
5 Botan 2,406
6 acmetool 2,022
7 xca 1,336
8 certigo 920
9 certspotter 913
10 certificate-ripper 665
11 go-guardian 528
12 webpki 451
13 PSPKI 359
14 zlint 341
15 openssl 286
16 tls-scan 273
17 ssl-checker 239
18 ct-woodpecker 170
19 secret_handshake 139
20 win-ca 99
21 lokey 93
22 CryptoNet 88
23 showcert 67

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com