{"id":16420459,"url":"https://github.com/grindsa/est_proxy","last_synced_at":"2025-06-16T11:05:47.960Z","repository":{"id":133221624,"uuid":"352033518","full_name":"grindsa/est_proxy","owner":"grindsa","description":"prototype of a simple EST server","archived":false,"fork":false,"pushed_at":"2021-07-10T04:20:23.000Z","size":473,"stargazers_count":0,"open_issues_count":1,"forks_count":2,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-02-24T16:17:20.524Z","etag":null,"topics":["certificate","enrollment-over-secure-transport","est","proxy","rfc7030","x509"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/grindsa.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-03-27T09:36:44.000Z","updated_at":"2023-10-25T18:08:53.000Z","dependencies_parsed_at":null,"dependency_job_id":"50256886-f2de-4a58-826d-be0ab967c179","html_url":"https://github.com/grindsa/est_proxy","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/grindsa/est_proxy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grindsa%2Fest_proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grindsa%2Fest_proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grindsa%2Fest_proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grindsa%2Fest_proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/grindsa","download_url":"https://codeload.github.com/grindsa/est_proxy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grindsa%2Fest_proxy/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260148280,"owners_count":22965910,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["certificate","enrollment-over-secure-transport","est","proxy","rfc7030","x509"],"created_at":"2024-10-11T07:28:05.218Z","updated_at":"2025-06-16T11:05:47.953Z","avatar_url":"https://github.com/grindsa.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!-- markdownlint-disable  MD013 --\u003e\n# est_proxy\n\n![GitHub release](https://img.shields.io/github/release/grindsa/est_proxy.svg)\n![GitHub last commit (branch)](https://img.shields.io/github/last-commit/grindsa/est_proxy/main.svg?label=last%20commit%20into%20main)\n![GitHub last commit (branch)](https://img.shields.io/github/last-commit/grindsa/est_proxy/devel.svg?label=last%20commit%20into%20devel)\n\u003c!-- [![codecov](https://codecov.io/gh/grindsa/est_proxy/branch/devel/graph/badge.svg)](https://codecov.io/gh/grindsa/est_proxy/branch/devel) --\u003e\n![Codecov main](https://img.shields.io/codecov/c/gh/grindsa/est_proxy/branch/main?label=test%20coverage%20main)\n![Codecov devel](https://img.shields.io/codecov/c/gh/grindsa/est_proxy/branch/devel?label=test%20coverage%20devel)\n\nest_proxy is development project to create an est protocol proxy. Main\nintention is to provide est enrollment services on CA servers which do not support this\nprotocol. It consists of two libraries:\n\n- est_proxy/*.py - a bunch of classes implementing est server functionality based\non [rfc7030](https://tools.ietf.org/html/rfc7030)\n- ca_handler.py - interface towards CA server. The intention of this library\nis to be modular that an [adaption to other CA servers](docs/ca_handler.md)\nshould be straight forward. As of today the following handlers are available:\n  - [NetGuard Certificate Manager/Insta certifier](docs/certifier.md)\n  - [Microsoft Certificate Enrollment Web Services](docs/mscertsrv.md)\n  - [Openssl](docs/openssl.md)\n  - [XCA](docs/xca.md)\n\nFor more up-to-date information and further documentation, please visit the\nproject's home page at: [https://github.com/grindsa/est_proxy](https://github.com/grindsa/est_proxy)\n\n## ChangeLog\n\nReleasenotes and ChangLog can be found at [https://github.com/grindsa/est_proxy/releases](https://github.com/grindsa/est_proxy/releases)\n\n## Disclaimer\n\nFollowing est-clients are used for regular testing of server functionality\n\n- [Cisco/libest](https://github.com/cisco/libest)\n- [GlobalSign estclient](https://github.com/globalsign/est)\n- [curl](https://curl.se/)\n\nOther clients are on my list for later testing. In case you are bored, feel\nfree to test other client implementations and raise [issues](https://github.com/grindsa/est_proxy/issues/new)\nif something does not work as expected.\n\n[Command-line parameters used for testing](docs/est-clients.md)\n\nI am not a professional developer. Keep this in mind while laughing about my\ncode and don’t forget to send patches.\n\n## Project status\n\nAs of today `est_proxy` supports the below authentication functions of RFC7030:\n\n- Certificate TLS Authentication [(Section 2.2.1)](https://tools.ietf.org/html/rfc7030#section-2.2.1)\n\nThe following call-flows are supported:\n\n- Distribution of CA Certificates (cacerts) [(Section 4.1)](https://tools.ietf.org/html/rfc7030#section-4.1)\n- Simple Enrollment of Clients (simpleenroll) [(Section 4.2.1)](https://tools.ietf.org/html/rfc7030#section-4.2.1)\n- Simple Re-enrollment of Clients (simplereenroll) [(Section 4.2.2)](https://tools.ietf.org/html/rfc7030#section-4.2.2)\n\nAdditional functionality will be added over time. If you are badly missing a\ncertain feature please raise an [issue](https://github.com/grindsa/est_proxy/issues/new)\nto let me know.\n\n## Installation\n\nThe fastest and most convenient way to install `est_proxy` is to use docker containers.  There are ready made images available at [dockerhub](https://hub.docker.com/r/grindsa/est_proxy) and [ghcr.io](https://github.com/grindsa?tab=packages\u0026ecosystem=container) as well as [instructions to build your own container](examples/Docker/).\n\nA manual installation procedure will be added at a later stage of the project.\n\n## Contributing\n\nPlease read [CONTRIBUTING.md](docs/CONTRIBUTING.md) for details on my code of\nconduct, and the process for submitting pull requests.\nPlease note that I have a life besides programming. Thus, expect a delay\nin answering.\n\n## Versioning\n\nI use [SemVer](http://semver.org/) for versioning. For the versions available,\nsee the [tags on this repository](https://github.com/grindsa/dkb-robo/tags).\n\n## License\n\nThis project is licensed under the GPLv3 - see the [LICENSE](LICENSE) file for details\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrindsa%2Fest_proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgrindsa%2Fest_proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrindsa%2Fest_proxy/lists"}