{"repo":"smallstep/certificates","free":true,"listed":false,"github":"https://github.com/smallstep/certificates","clone":"git clone https://github.com/smallstep/certificates.git","description":"🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.","language":"Go","stars":8755,"topics":["tls","x509","certificates","security","security-tools","certificate-authority","pki","ca","go","acme-server"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"step-ca step-ca is an online certificate authority for secure, automated certificate management for DevOps. It's the server counterpart to the step CLI tool for working with certificates and keys. Both projects are maintained by Smallstep Labs. You can use step-ca to: - Issue HTTPS server and client certificates that work in browsers (RFC5280 and CA/Browser Forum compliance) - Issue TLS certificates for DevOps: VMs, containers, APIs, database connections, Kubernetes pods... - Issue SSH certificates: - For people, in exchange for single sign-on identity tokens - For hosts, in exchange for cloud instance identity documents - Easily automate certificate management: - It's an ACME server that supports all popular ACME challenge types - It comes with a Go wrapper - ... and there's a command-line client you can use in scripts! --- Comparison with Smallstep's commercial product step-ca is optimized for a two-tier PKI serving common DevOps use cases. As you design your PKI, if you need any of the following, consider our commercial CA: - Multiple certificate authorities - Active revocation (CRL, OCSP) - Turnkey high-volume, high availability CA - An API for seamless IaC management of your PKI - Integrated support for SCEP & NDES, for migrating from legacy Active Directory Certificate Services deployments - Device identity — cross-platform device inventory and attestation using Secure Enclave & TPM 2.0 - Highly automated PKI — managed certificate renewal, monitoring, TPM-based attested","default_branch":null,"files":null,"tree":[],"storefront":"/r/smallstep","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/smallstep/certificates/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}