HN Explorer

Ask HN: Are there any open source PKI solutions that don't suck?

6 points by Bauernfeind ↗ HN
We are a small IoT Startup and looking for a PKI solution to provision certificates for our devices. I had a look at openxpki, smallstep and PrimeKey, but either they are a pain to run or really expensive.

Do you know any other solutions? :)

6 comments

[ 3.7 ms ] story [ 29.5 ms ] thread
rektide
dogtags (perhaps via freeipa) or cfssl could be options, potentially.
Nextgrid
XCA if you need something simple running on a single machine.
verdverm
CFSSL, cloudflare's OSS CLI for PKI
ricktdotorg
i second cfssl. it's pretty fantastic for internal PKI.