mtls

Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure

Selfhostable web app to make managing mTLS certificates a breeze

Automatic client and server certificate distribution and maintenance

Zero Trust OpenID / Proxy service

Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.

Certificate Manager in .NET Core for creating and using X509 certificates

Self-hosted reverse proxy built on Caddy: proxy hosts, automatic HTTPS, TCP/UDP streams and traffic analytics, with an optional per-host WAF, sign-in and access rules.

🔒Add SSL/TLS functionality to any Arduino library

Self-hosted certificate authority with a web UI: ACME, SCEP, EST, OCSP, CRL, SSH CA, Windows autoenrollment and network discovery.

👋 Docs demonstrating mutual TLS configurations in various technologies

Demo for Client Certificate Authentication with Node.js Tutorial

Async MQTT Broker and sync MQTTS Broker over TCP/TLS (mTLS), websockets and secure websocekt for embedded systems, specifically ESP32/ESP8266. Use FreeRTOS to advanced multitasking capabilities and Arduino core.

TLSPROXY is a TLS termination proxy that provides automatic TLS encryption for various network services. It supports SSO, client authentication, and can act as a web server or reverse proxy.

NET.ts - node express template built on TypeScript that follows the top-ranked practices from the https://github.com/goldbergyoni/nodebestpractices ⚡

Examples of client authentication with gRPC

Unofficial REWE API client in Go and Python, with a CLI: discounts (Angebote), products, markets, recalls. Handles the app's Cloudflare mTLS.

HTTP/3-enable existing HTTP apps. Leverage HTTP3 native features and auto-enable workload identity (SPIFFE), AuthN (mTLS/x509, OIDC/Auth0-Okta), AuthZ (OPA), defense-in-depth (WAAP/WAF), and observability (metrics, logs, alerting, dashboard).

📗 Terraform Module for Nomad clusters with Consul on GCP

Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud

Kattlo CLI Project