Ask HN: Are there any open source PKI solutions that don't suck?
We are a small IoT Startup and looking for a PKI solution to provision certificates for our devices. I had a look at openxpki, smallstep and PrimeKey, but either they are a pain to run or really expensive.
Do you know any other solutions? :) CFSSL, cloudflare's OSS CLI for PKI i second cfssl. it's pretty fantastic for internal PKI. XCA if you need something simple running on a single machine. dogtags (perhaps via freeipa) or cfssl could be options, potentially. Vault X.509 LetsEncrypt