Certificate Open Source Projects

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

Clone this repo to build Frida

The easiest, and most secure way to access and protect all of your infrastructure.

How to improve NGINX performance, security, and other important things.

Automatically provision and manage TLS certificates in Kubernetes

webhook is a lightweight incoming webhook server to run shell commands

An HTTP toolkit for security research.

Disk encryption with strong security based on TrueCrypt

A barebones WebSocket client and server implementation written in 100% Java.

Let's Encrypt/ACME client and library written in Go

CFSSL: Cloudflare's PKI and TLS toolkit

A Kubernetes controller and tool for one-way encrypted Secrets

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

OS X and iOS application and framework to play with the Apple Push Notification service (APNs)

ACME client implemented as a simple shell-script – just add water

An ACME-based certificate authority, written in Go.

Async-friendly QUIC implementation in Rust

Curated list of 20,000+ hours and 200+ free courses with certificates in IT, CS, Design and Business.

A small and fast async runtime for Rust

A tiny script to issue and renew TLS certs from Let's Encrypt

A binary authorization and monitoring system for macOS

easy-rsa - Simple shell based CA utility

iOS9适配系列教程（iOS开发学习交流群： https://github.com/ChenYilong/iOSBlog/issues/21）

Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service.

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

User-friendly, commercial-grade software for processing aerial imagery. 🛩

A transparent, highly scalable and cryptographically verifiable data store.

iReSign allows iDevice app bundles (.ipa) files to be signed or resigned with a digital certificate from Apple for distribution. This tool is aimed at enterprises users, for enterprise deployment, when the person signing the app is different than the person(s) developing it.

The administration for the IdentityServer4 and Asp.Net Core Identity

CAUTION: END OF SUPPORT ON 3 JUN 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.

Fast and secure tunnels over HTTP/2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.

:lock: Memorable site for testing clients against bad SSL configs.

Automated docker nginx proxy integrated with letsencrypt.

All In One Web Recon

A SIP003 plugin based on v2ray

Next generation iOS and Android apps for Mattermost in React Native

图文教程搭建一个vpn翻墙

Tools to bootstrap CAs, certificate requests, and signed certificates.

C# Websocket Implementation

Stealing Signatures and Making One Invalid Signature at a Time

Send push notifications to mobile devices through GCM or APNS in Django.

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.

Source code for https://gethttpsforfree.com/

The push notification service for Ruby.

This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.

A simple TLS proxy with mutual authentication for securing non-TLS services.

DEPRECATED: Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

Martian is a library for building custom HTTP/S proxies

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.

X Certificate and Key management

Blazor Boilerplate / Starter Template with MudBlazor

Plex @ aTV - think different...

Microsoft SQL server driver written in go language