Hacker GitHub

← All repos

cloudflare/cfssl

View on GitHub ↗ ★ 9,493 Go

CFSSL: Cloudflare's PKI and TLS toolkit

17 mentions on Hacker News by 14 people: 1 story, 16 comments · first 2015-06-12 · latest 2025-05-23

Mentions per year 17 mentions · busiest year 2015 (3)
20082026
AllStoriesComments NewestTopOldest
  1. `cfssl` shows how easy could getting certificates signed be for the typical use case. https://github.com/cloudflare/cfssl
    comment by folmar · 2025-05-23
  2. I like cfssl: https://github.com/cloudflare/cfssl .
    comment by rad_gruchalski · 2023-09-17 · in Running one’s own root Certificate Authority in 2023
  3. …cfssl[1] to generate a root certificate + a localhost certificate and then trusting the root. [1]: https://github.com/cloudflare/cfssl
    comment by fiddlerwoaroof · 2023-09-16 · in Running one’s own root Certificate Authority in 2023
  4. …and the proposers were more likely malicious than stupid. That's a rant for a different post. [4] https://github.com/cloudflare/cfssl [5] https://cloud.google.com/docs/authentication/application-def...
    comment by GauntletWizard · 2022-12-06 · in Linux Certificate Authority root stores have a too simple view of 'trust'
  5. …usually a root + intermedia ca, and leaf certs, works really well with cert manager in kubernetes. https://github.com/cloudflare/cfssl
    comment by rad_gruchalski · 2022-10-31 · in Mkcert: Simple zero-config tool to make locally trusted development certificates
  6. …[6] https://www.intel.com/content/www/us/en/architecture-and-tec... [7] https://github.com/cloudflare/cfssl
    comment by aspenmayer · 2020-04-16 · in Workstream: A fast virtual computer you can use for anything
  7. check out Cloudflares CFSSL https://github.com/cloudflare/cfssl to manage the CA side, its API, and its OCSP then check out Netflix Lemur for issuing and tracking certs automatically. https://github.com/Netflix/lemur
    comment by nimbius · 2020-02-23 · in Safari will no longer trust certs valid for more than 13 months
  8. …the right answer is almost definitely to use your own internal PKI, not to use wildcard certs. See: https://github.com/cloudflare/cfssl https://github.com/hashicorp/vault https://github.com/smallstep/certificates
    comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)
  9. …easier. But that’s arguable. What the article describes isn’t easy. Using something like cfssl ( https://github.com/cloudflare/cfssl ) or vault ( https://github.com/hashicorp/vault ) or step certificates (…
    comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)
  10. …this with OpenSSL and it requires half a dozen steps, but with cfssl you can do this quite easily: https://github.com/cloudflare/cfssl/wiki/Creating-a-new-CSR .
    comment by prdonahue · 2018-03-30 · in 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?
  11. https://github.com/cloudflare/cfssl
    comment by prdonahue · 2017-08-05 · in How Kubernetes certificate authorities work
  12. …//github.com/letsencrypt/boulder/pull/2748 [2] https://github.com/letsencrypt/boulder/issues/2728 [3] https://github.com/cloudflare/cfssl/blob/master/ocsp/respond... [4] https://github.com/letsencrypt/boulder/pull/2689/files [5]…
    comment by niftich · 2017-05-19 · in Let's Encrypt is down
  13. I guess they most be using something in front of the code [0] (which do document the double slash issue). Probably should have used PathUnescape[1] on line 185 though. [0] https://github.com/letsencrypt/boulder/blob/master/vendor/gi... [1]…
    comment by lilei2 · 2017-05-19 · in Let's Encrypt is down
  14. ▲ 9
    CFSSL – CloudFlare's PKI and TLS Toolkit
    story by zerognowl · 2016-09-28 · 0 comments
  15. You might also like cloudflare's cfssl toolsuite: https://github.com/cloudflare/cfssl I've reduced most of my cert-generating to just a one-liner and a JSON metadata file. For example: https://twitter.com/shazow/status/582262725683777536
    comment by shazow · 2015-12-27 · in Web Security – Client side certs
  16. …is also CloudFlare's cfssl[0]. I'm curious to hear what people think about the differences. 0 - https://github.com/cloudflare/cfssl
    comment by rubiquity · 2015-09-21 · in Introducing Lemur
  17. …) and is called by the CFSSL library, that has isCA = false as default ( https://github.com/cloudflare/cfssl/blob/152152bec641f502651... ) Also it is verified that the CSR doesn't contain that field in Boulder: https://github.com/l
    comment by baby · 2015-06-12 · in Let's Encrypt Overview