ryankurte / pkiLinks
Scripts to bootstrap internal Certificate Authorities (CAs) using Yubikeys
☆83Updated 5 years ago
Alternatives and similar repositories for pki
Users that are interested in pki are comparing it to the libraries listed below
Sorting:
- Tools for using PIV tokens (like Yubikeys) as an SSH agent, for encrypting data at rest, and more☆213Updated 3 weeks ago
- Proxy server for ACME DNS challenges written in Go☆84Updated last year
- LDAP schema and tools for Yubico YubiKey authentication☆59Updated 3 years ago
- Small-scale CA with SmartCard support - CLI wrapper for OpenSSL and OpenSC☆62Updated 5 years ago
- PKCS#11 provider with smart card support via GnuPG☆36Updated 6 years ago
- HSMWiz is a frontend for OpenSC, pkcs11tool and pkcs15tool to ease handling of HSM smartcards☆50Updated 5 years ago
- How to use a Yubikey with OpenSSH without GPG☆157Updated 4 years ago
- Verify and assert policy on YubiKey attestation certificates☆20Updated last month
- A guide for setting up LUKS boot with a key from TPM in Linux☆158Updated 5 years ago
- ☆53Updated 4 months ago
- Calculate future (next boot) TPM PCRs after a kernel upgrade☆41Updated 6 months ago
- Mirror only. Official repository at https://git.glasklar.is/system-transparency/core/system-transparency☆89Updated 5 months ago
- An SSH and GPG agent which you can use with your PIV hardware security device (e.g. a Yubikey).☆95Updated this week
- X.509 Swiss Army Knife is a toolkit atop OpenSSL to ease generation of CAs and aid white-hat pentesting☆44Updated 2 years ago
- Bash script for setting or clearing touch requirements for # cryptographic operations the OpenPGP application on a YubiKey 4☆157Updated 4 years ago
- 'DANE for SMTP' wiki☆32Updated 5 years ago
- PKCS#11 GnuPG SCD☆73Updated last week
- Use OpenSC in macOS CryptoTokenKit.☆80Updated last year
- Attest the trustworthiness of a device against a human using time-based one-time passwords☆180Updated last year
- Simple PKCS11 provider for TPM chips☆255Updated 3 months ago
- PKCS#11 module for NetHSM☆39Updated last month
- Utility to generate VXLAN over Wireguard mesh SD-WAN configuration☆164Updated last year
- Git hooks to manage a repository of DNS zones☆52Updated 3 years ago
- Short term certificate based identity system (ssh/x509 ca + openidc)☆142Updated 2 weeks ago
- bird configuration for eve networks in dn42☆48Updated 8 years ago
- A guide for setting up LUKS boot with a key from TPM in Linux☆186Updated 7 years ago
- Command line interface application which uses on-device RSA keys (through OpenSC and PKCS#11) to encrypt/decrypt AES key used in turn to…☆33Updated 6 years ago
- Pluggable ACME: a tiny ACME-CA implementation to enhance existing CA infrastructure☆58Updated 3 months ago
- Intel AMT / vPro mass management tool☆34Updated 7 years ago
- Some random script turning a OpenPGP smartcard into a low-end HSM☆27Updated 7 years ago