ryankurte / pki
Scripts to bootstrap internal Certificate Authorities (CAs) using Yubikeys
☆76Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for pki
- Tools for using PIV tokens (like Yubikeys) as an SSH agent, for encrypting data at rest, and more☆194Updated 2 weeks ago
- Proof of concept for using Yubikey NEO in a PIV physical access control application☆20Updated 8 years ago
- Small-scale CA with SmartCard support - CLI wrapper for OpenSSL and OpenSC☆61Updated 4 years ago
- PKCS#11 provider with smart card support via GnuPG☆36Updated 5 years ago
- Mirror only. Official repository at https://git.glasklar.is/system-transparency/core/system-transparency☆86Updated last month
- LDAP schema and tools for Yubico YubiKey authentication☆58Updated 2 years ago
- HSMWiz is a frontend for OpenSC, pkcs11tool and pkcs15tool to ease handling of HSM smartcards☆42Updated 3 years ago
- Pluggable ACME: a tiny ACME-CA implementation to enhance existing CA infrastructure☆46Updated 2 weeks ago
- Use OpenSC in macOS CryptoTokenKit.☆76Updated 9 months ago
- OpenPGP keys published on your website (WKD)☆49Updated 10 months ago
- ☆50Updated last month
- Proxy server for ACME DNS challenges written in Go☆83Updated 5 months ago
- TPM2 related stuff☆27Updated 5 months ago
- ☆26Updated 9 months ago
- 'DANE for SMTP' wiki☆32Updated 4 years ago
- ☆44Updated 2 months ago
- Verify and assert policy on YubiKey attestation certificates☆17Updated last week
- X.509 Swiss Army Knife is a toolkit atop OpenSSL to ease generation of CAs and aid white-hat pentesting☆39Updated last year
- Command line interface application which uses on-device RSA keys (through OpenSC and PKCS#11) to encrypt/decrypt AES key used in turn to…☆32Updated 5 years ago
- A simple way to generate password-proteceted secrets from a FIDO2 authenticator with the hmac-secret extension☆53Updated 2 years ago
- How to use a Yubikey with OpenSSH without GPG☆155Updated 3 years ago
- A Setup for creating a Public Key Infrastructure backed by a YubiHSM2☆14Updated last year
- Attest the trustworthiness of a device against a human using time-based one-time passwords☆166Updated 4 months ago
- Example code for FIDO U2F authentication with the Lua module in nginx☆31Updated 9 years ago
- Simple PKCS11 provider for TPM chips☆252Updated 5 months ago
- Git hooks to manage a repository of DNS zones☆52Updated 2 years ago
- Simple and secure YubiKey OTP validation server☆34Updated 2 years ago
- ☆32Updated 2 years ago
- This is a command line client to manage the privacyIDEA server.☆32Updated last year
- Java Card implementation of the OpenPGP smart card☆64Updated last year