Ask HN: Are there any open source PKI solutions that don't suck?

by Bauernfeind on 12/21/2021, 9:46:46 PM with 6 comments
We are a small IoT Startup and looking for a PKI solution to provision certificates for our devices. I had a look at openxpki, smallstep and PrimeKey, but either they are a pain to run or really expensive.

Do you know any other solutions? :)

  • by verdverm on 12/22/2021, 2:53:00 AM

    CFSSL, cloudflare's OSS CLI for PKI

  • by Nextgrid on 12/22/2021, 2:50:02 AM

    XCA if you need something simple running on a single machine.

  • by rektide on 12/21/2021, 9:48:45 PM

    dogtags (perhaps via freeipa) or cfssl could be options, potentially.

  • by botanicalfriend on 12/22/2021, 12:02:43 AM

    Vault X.509

  • by yuppie_scum on 12/21/2021, 10:05:05 PM

    LetsEncrypt