Ask HN: Are there any open source PKI solutions that don't suck?
We are a small IoT Startup and looking for a PKI solution to provision certificates for our devices. I had a look at openxpki, smallstep and PrimeKey, but either they are a pain to run or really expensive.
Do you know any other solutions? :)
5 threads
CFSSL, cloudflare's OSS CLI for PKI
i second cfssl. it's pretty fantastic for internal PKI.
XCA if you need something simple running on a single machine.
dogtags (perhaps via freeipa) or cfssl could be options, potentially.
Vault X.509
LetsEncrypt