minica | simple CA intended for use in situations where the CA | TLS library

by jsha Go Version: v1.0.2 License: MIT

X-Ray Key Features Code Snippets Community Discussions(2)Vulnerabilities Install Support

kandi X-RAY | minica Summary

minica is a Go library typically used in Security, TLS applications. minica has no bugs, it has no vulnerabilities, it has a Permissive License and it has medium support. You can download it from GitHub.

Minica is a simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used. It automatically generates both a key and a certificate when asked to produce a certificate. It does not offer OCSP or CRL services. Minica is appropriate, for instance, for generating certificates for RPC systems or microservices. On first run, minica will generate a keypair and a root certificate in the current directory, and will reuse that same keypair and root certificate unless they are deleted. On each run, minica will generate a new keypair and sign an end-entity (leaf) certificate for that keypair. The certificate will contain a list of DNS names and/or IP addresses from the command line flags. The key and certificate are placed in a new directory whose name is chosen as the first domain name from the certificate, or the first IP address if no domain names are present. It will not overwrite existing keys or certificates. The certificate will have a validity of 2 years and 30 days.

Support

Quality

Security

License

Reuse

Support

minica has a medium active ecosystem.

It has 2646 star(s) with 218 fork(s). There are 50 watchers for this library.

It had no major release in the last 12 months.

There are 20 open issues and 12 have been closed. On average issues are closed in 50 days. There are 11 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of minica is v1.0.2

Quality

minica has no bugs reported.

Security

minica has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

minica is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

minica releases are available to install and integrate.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of minica

Get all kandi verified functions for this library.

minica Key Features

No Key Features are available at this moment for minica.

minica Examples and Code Snippets

No Code Snippets are available at this moment for minica.

Community Discussions

Trending Discussions on minica

How to create a test server which uses TLS client authentication in Go?

wildcard SSL/TLS certificate for second-level domain rejected be the browsers

QUESTION

How to create a test server which uses TLS client authentication in Go?

Asked 2020-Apr-07 at 16:38

I'd like to write a unit test for an HTTP handler which extracts certain information from a device's certificate. I've found this gist, https://gist.github.com/ncw/9253562, which uses openssl to generate the certificates and simply reads the resulting files in its client.go and server.go. To make things a bit more transparent, however, I'd like to generate the certificates using Go's standard library.

Here is my attempt so far at the unit test (available at https://github.com/kurtpeek/client-auth-test):

...

ANSWER

Answered 2020-Apr-07 at 00:24

Looking a bit more closely at ncw's gist, I noticed that one key difference was the setting of the InsecureSkipVerify option in the client's TLS config to true. I added this, so

Source https://stackoverflow.com/questions/61069794

QUESTION

wildcard SSL/TLS certificate for second-level domain rejected be the browsers

Asked 2019-Mar-01 at 08:03

I'm trying to create certificate for both test and *.test. I'm using minica to generate it and everything goes well (alt names are added):

...

ANSWER

Answered 2019-Mar-01 at 08:03

Although you can create a valid certificate for second-level domain or even top level domain those certificates won't be respected by the browsers for security reasons (i.e. certificate for *.com would be very dangerous). So even though test is a reserved domain name that can't be registered by any registrar, the certificate will be still rejected.

When you try to do this with mkcert you'll get pretty nice warning:

Warning: many browsers don't support second-level wildcards like *.test ⚠️

Use i.e. app.test + *.app.test instead.

Source https://stackoverflow.com/questions/54939770

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install minica

First, install the Go tools and set up your $GOPATH. Then, run:.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: