https://github.com/certonid/certonid
Certonid is a Serverless SSH Certificate Authority
https://github.com/certonid/certonid
aws aws-kms aws-lambda aws-terraform certificate-authority certificates developer-tools devops openssh openssl security security-tools serverless ssh ssh-ca ssh-certificate-authorities ssh-certificate-authority ssh-certificates
Last synced: 20 days ago
JSON representation
Certonid is a Serverless SSH Certificate Authority
- Host: GitHub
- URL: https://github.com/certonid/certonid
- Owner: certonid
- License: mit
- Created: 2019-08-25T21:05:29.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2025-03-04T14:26:12.000Z (11 months ago)
- Last Synced: 2025-03-04T15:29:56.590Z (11 months ago)
- Topics: aws, aws-kms, aws-lambda, aws-terraform, certificate-authority, certificates, developer-tools, devops, openssh, openssl, security, security-tools, serverless, ssh, ssh-ca, ssh-certificate-authorities, ssh-certificate-authority, ssh-certificates
- Language: Go
- Homepage:
- Size: 7.1 MB
- Stars: 74
- Watchers: 7
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
# Certonid [](https://github.com/certonid/certonid/actions/workflows/build-and-release.yml)
Certonid is a Serverless SSH Certificate Authority.
Consists of two parts: CLI and serverless function.
## Releases
[Download latest releases](https://github.com/certonid/certonid/releases)
For Mac OS or Linux you can use [Homebrew tap](https://docs.brew.sh/Taps):
```bash
brew install certonid/tap/certonid
```
or another way:
```bash
brew tap certonid/tap
brew install certonid
```
## Documentation
[All information published at Wiki page](https://github.com/certonid/certonid/wiki)
## Articles
- [[English] Certonid — the SSH Certificate Authority Deployed on AWS Lambda](https://mailtrap.io/blog/certonid/)
- [[Russian] Certonid — SSH центр сертификации, который работает на AWS Lambda](https://dou.ua/lenta/articles/certonid-ssh/)
## AWS Terraform module
To simplify setup on AWS, you can use [Certonid AWS Terraform module](https://registry.terraform.io/modules/certonid/certonid/aws/latest)
## Binaries security
`checksum.txt` signed by gpg key. You can check its by downloading with archive it `.sig` file and verify signature:
```bash
$ gpg --verify checksums.txt.sig checksums.txt
gpg: Signature made Fri Jul 22 17:24:40 2022 EEST
gpg: using RSA key 36E7986334C6DE2B41A29537A77A9969BEFF93AE
gpg: Good signature from "Certonid Sign Key (Certonid Sign Key) "
```
Each archive have [SBOM file](https://www.ntia.gov/SBOM).
## Dev build
```shell
$ cd serverless && GOOS=linux go build -o serverless main.go
$ cd ..
$ cd cli && go build -o certonid main.go
```
## Roadmap
- [ ] Add tests
- [ ] Improve documentation
- [ ] Website and video
- [ ] Use serverless framework to automate deploy and setup
- [ ] Support AWS S3 for SSH CA key