{"repo":"oriolrius/pki-manager-web","free":true,"listed":false,"github":"https://github.com/oriolrius/pki-manager-web","clone":"git clone https://github.com/oriolrius/pki-manager-web.git","description":"Self-hosted web PKI for the full X.509 & SSH certificate lifecycle — private keys in Cosmian KMS, with a Kubernetes cert-manager external issuer and CRL/KRL revocation.","language":"TypeScript","stars":18,"topics":["certificate-authority","certificate-management","kms","pki","react","security","typescript","x509","cert-manager","code-signing"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"PKI Manager A self-hosted web application for the complete X.509 and SSH certificate lifecycle — issue, renew, and revoke certificates with private keys kept in Cosmian KMS, plus a Kubernetes cert-manager external issuer. Overview PKI Manager provides complete control over your Public Key Infrastructure (PKI) — X.509, SSH, and Kubernetes certificates — without relying on external certificate authorities. Perfect for enterprises, home labs, and development environments that demand full control over their security infrastructure. Key Highlights - Self-Hosted PKI : Create and manage your own root Certificate Authorities - Multi-Type Certificates : Server (TLS/SSL), Client Auth, S/MIME Email, Code Signing - Secure Key Management : Integration with Cosmian KMS — private keys never touch disk - Kubernetes-Native : cert-manager external issuer that auto-signs & auto-approves cluster CSRs (one cluster token = one CA) - CRL Revocation : CA-signed Certificate Revocation Lists served over HTTP, with CRL Distribution Points (CDP) embedded in issued certificates - SSH Certificate Authority : Dual User+Host CA with principals, KRL revocation, and per-host user access blocks pushed to a host agent - Dual API : Typed tRPC for the SPA plus a REST/OpenAPI surface with live Swagger docs ( /api/v1 , /api/docs ) - Bulk Operations : CSV-based bulk certificate creation and batch operations - OIDC Authentication : Provider-agnostic auth supporting Keycloak, Auth0, Okta, Azure AD - Modern UI : React ","default_branch":null,"files":null,"tree":[],"storefront":"/r/oriolrius","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/oriolrius/pki-manager-web/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}