216 Open Source Certificate Software Projects
Free and open source certificate code projects including engines, APIs, generators, and tools.
Certbot 27270 ⭐
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
Digitalbazaar Forge 3693 ⭐
Websockify 2544 ⭐
Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service. Implementations in Python, C, Node.js and Ruby.
Jsrsasign 2415 ⭐
Docker Compose Letsencrypt Nginx Proxy Companion 1891 ⭐
Automated docker nginx proxy integrated with letsencrypt.
Getssl 1420 ⭐
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
Pki.js 917 ⭐
Certbot Letencrypt Wildcardcertificates Alydns Au 756 ⭐
certbot'renewing letencrypt certificate plugin - automatic verification aliyun/tencentyun/godaddy dns
Dca Prep Guide 698 ⭐
Docker Certification Associate preparation guide - a list of resources to help you prepare for a successful certification
Hiproxy 627 ⭐
🛠 hiproxy is a lightweight proxy tool for Front-End developers based on Node.js that supports an NGINX-like configuration. 🔥
Domain_hunter 524 ⭐
A Burp Suite Extender that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件
Ssl Proxy 382 ⭐
:lock: Simple zero-config SSL reverse proxy with real autogenerated certificates (LetsEncrypt, self-signed, provided)
Posh Acme 353 ⭐
ACME v2 protocol client for generating certificates using Let's Encrypt (or other ACME v2 compliant CA)
Rancher Letsencrypt 311 ⭐
:cow: Rancher service that obtains and manages free SSL certificates from the Let's Encrypt CA
Xipki 284 ⭐
Highly scalable and high-performance open source PKI (CA and OCSP responder). Minimal dependencies, No-JPA, No-Spring
Crypt Le 256 ⭐
Crypt::LE - Let's Encrypt / Buypass / ACME client and library in Perl for obtaining free SSL certificates (inc. generating RSA/ECC keys and CSRs). HTTP/DNS verification is supported out of the box, easily extended with plugins, easily dockerized.
Check_ssl_cert 221 ⭐
check_ssl_cert is a shell script (that can be used as a Nagios plugin) to check the CA and validity of an X.509 certificate
Xresign 234 ⭐
XReSign - developer tool to sign or resign iOS app (.ipa) files with a digital certificate from Apple.
Eustasy Bubbly 209 ⭐
Better SSL in Nginx in 10 minutes. Configuration files and setup scripts for Certbot.
A December Of Algorithms 2019 192 ⭐
A December of Algorithms is a small collection of algorithms to implement this December. Finish it all to get a certificate. :christmas_tree:
Google Mobile Web Specialist Certification Guide 176 ⭐
If you are looking for becoming a Mobile Web Specialist by Google, this guide will be your best friend in your journey
Golang Https Example 137 ⭐
Extremely simple HTTPS client in Go, along with all the openssl commands to make certs work. Errors and solutions in the documentation.
Easycert 118 ⭐
EasyCert quickly generates web server TLS certificates that have been self-signed by a private certificate authority that it also creates.
Pokemon Go Xposed 119 ⭐
📱 Xposed module for Pokemon Go - Circumvents the certificate pinning by injecting the expected SSL trust chain, allows you to MITM and to configure a custom API endpoint.
Node Acme Lambda 118 ⭐
Use AWS Lambda to manage SSL certificates for ACME providers like Let's Encrypt.
Aspnetcorecertificates 104 ⭐
Certificate Manager in .NET Core for creating and using X509 certificates
Docker Nginx Gunicorn Flask Letsencrypt 100 ⭐
Boilerplate code for setting up Nginx + Gunicorn + Flask + LetsEncrypt certificates using docker-compose.
Certificate Authority Situational Awareness 96 ⭐
Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
Lpic 1 Anki Flashcards 90 ⭐
Deck of Anki flashcards for the LPIC-1 (Linux System Administrator) exams 101 and 102 of the Linux Professional Institute (LPI).
Icingaweb2 Module X509 72 ⭐
Keeps track of certificates as they are deployed in a network environment.
X509 64 ⭐
Elixir package for working with X.509 certificates, Certificate Signing Requests (CSRs), Certificate Revocation Lists (CRLs) and RSA/ECC key pairs
Freshcerts 56 ⭐
ACME certificate protocol (Let's Encrypt) proxy client with a dashboard and monitoring
Cert Gen 56 ⭐
Generate CA and self-signed SSL certificates usable in your browser for local development.
Website Checks 60 ⭐
check your website for issues with multiple tools and get PDF reports of the results
Google It Automation With Python 64 ⭐
Repository to keep track of Google IT Automation With Python provided by Coursera
Acme2 42 ⭐
Another PHP client for acme protocal (version 2) implementation, used for generating letsencrypt's free ssl certificates.
Nico 38 ⭐
A HTTP2 web server for reverse proxy and single page application, automatically apply for ssl certificate, Zero-Configuration.
Letsencrypt Autorenew Docker 40 ⭐
letsencrypt certificate generation and cron enabled autorenewal as a docker image
Letsencrypt Inwx 37 ⭐
A small cli utility for automating the letsencrypt dns-01 challenge for domains hosted by inwx.
Aws Solutions Architect Associate Certificate 32 ⭐
Note to pass the AWS Solutions Architect Associate Exam
Pki Manager 31 ⭐
IT Freelancers : Manage small PKI for multiple projects (or clients) with 2 bash scripts
Certupdater 29 ⭐
Lambda implementation for automatically getting and uploading to S3 for Let's Encrypt certificates.
Paccor 30 ⭐
The Platform Attribute Certificate Creator can gather component details, create, sign, and validate the TCG-defined Platform Credential. #nsacyber
Concerto 26 ⭐
A command line tool and a library to generate TLS certificates for development purposes.
Qdigidoc 25 ⭐
DEPRECATED DigiDoc3 Client is a program that can be used to sign digitally with ID-card and Mobile-ID, check the validity of digital signatures and open and save documents inside the signature container.
Dehydrated Route53 Hook Script 25 ⭐
Dehydrated hook script that employs cli53 to enable dns-01 challenges with AWS Route 53
Crl Monitor 24 ⭐
CRL Monitor - X.509 Certificate Revocation List monitoring and X.509/Subject caching
Serverless Certificate Creator 27 ⭐
serverless plugin to manage the certificate of your lambdas custom domain (API Gateway=
0x4447 Cli Node Potato 25 ⭐
🥔 Upload a static page to AWS S3 while automatically configuring CloudFront
Pkcs11 Tools 25 ⭐
A set of tools to manage objects on PKCS#11 crypotographic tokens. Compatible with any PKCS#11 library, including NSS.
API Layer 24 ⭐
The API Mediation Layer provides a single point of access for mainframe service REST APIs.
Letsencrypt Fast 22 ⭐
The fastest way to test/generate/renew Let's Encrypt SSL certificates!!! Requires root access and a live webserver to run the script at.
Sslcontext Kickstart 64 ⭐
A lightweight high level library for configuring a http client based on SSLContext or other properties such as TrustManager, KeyManager or Trusted Certificates to communicate over SSL/TLS for one way authentication or two way authentication provided by the SSLFactory. Support for Java, Scala and Kotlin based clients with examples. Available client examples are: Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel. Kohttp and Ktor.
Ct.js 18 ⭐
CTjs is a full set of classes necessary to work with any kind of Certificate Transparency log (V1 as from RFC6962, or V2 as from RFC6962-bis). In CTjs you could find all necessary validation/verification functions for all related data shipped with full-featured examples showning how to validate/verify. Also in scope of CTjs I made code showing example from RFC6962 item 2.1.3 on a real data from real Certificate Transparency log.
Yaog 20 ⭐
Yet Another Openssl GUI : Qt based openssl GUI to create CSR, certificates, keys (RSA / DSA / EC)
Selfca 18 ⭐
Generate your own CA and sign certs fast. (maybe I should rename it to "not-so-easy-rsa" or "hardcore-rsa"?)
Keepass Smart Certificate Key Provider 16 ⭐
KeePass plugin that allows to use Smart Card certificates to encrypt database more securely.
Cercat 18 ⭐
Monitor issued certificates in real-time and send alerts to Slack when a domain matches.
Btcert 16 ⭐
BTCert authenticates academic certificates by means of a digital credential that allows immediate verification by third parties. BTCerts uses blockchain and cryptographic techniques to create a certification infrastructure based on the standard Blockcerts
Ssl Date Checker 16 ⭐
Nodejs Library to check and report on the start and expiration date of a given SSL certificate for a given domain.
Gsh 17 ⭐
GSH is an OpenID Connect-compatible authentication system for systems using OpenSSH servers
Pemencrypt 14 ⭐
PEMEncrypt is a cross-platform PowerShell module handling string encryption and decryption using RSA keys only.
Openssl Node.js 15 ⭐
is a package which gives you a possibility to run every OpenSSL command 🔒 in Node.js in a handy way. Moreover, parameters like -in, -keyin, -config and etc can be replaced by a raw data (Buffor).
Ansible Letsencrypt Cloudflare 11 ⭐
Ansible role to simplify the process of renewing LetsEncrypt Certificates when utilising Cloudflare as a DNS provider
Letsencrypt Heroku Dashboard 11 ⭐
A dashboard to manage your Let's Encrypt certificates on your Heroku apps with Cloudflare DNS.
Wys Whatsyoursign Shell Script Version 12 ⭐
wys – shell script version of Patrick Wardle's WhatsYourSign
Posh Acme.deploy 11 ⭐
Collection of certificate deployment functions intended for use with Posh-ACME
Cp Installssl 10 ⭐
Script to install SSL certificates (for example Let's Encrypt) with cPanel's JSON API
Dda Serverspec Crate 10 ⭐
A crate for testing multiple server nodes against a given spec. Test can be executed local, remote against servers or you may even use remote tested servers as probes.
X509sak 15 ⭐
X.509 Swiss Army Knife is a toolkit atop OpenSSL to ease generation of CAs and aid white-hat pentesting
Windows Pe Signature Verifying 11 ⭐
Modern C++ wrapper for Windows PE signature verification mechanism
Serverless Cloudfront Distribution Certificate 10 ⭐
This is a plugin for automatic creation of certificate for cloudfront distribution
Mutual Tls Ssl 107 ⭐
Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, Kohttp and ktor. Also other server examples are available such as jersey with grizzly.
Ansible Role Kubernetes Ca 10 ⭐
Generates certificate authority and certificates needed for Kubernetes
Namesilo Letsencrypt 11 ⭐
Automatically generate/renew Let's Encrypt certificates with Certbot on NameSilo DNS
Trellis Ca Certificates 10 ⭐
Trellis Ansible role to add custom CA certficates to OpenSSL's trusted store. Ideal for using alongside Digital Ocean managed databases which require SSL/TLS.
bad-slug 17 ⭐
Dumps Let's Encrypt certificates of a specified domain which Traefik stores in acme.json.