https://github.com/certonid/certonid

Certonid is a Serverless SSH Certificate Authority
https://github.com/certonid/certonid

aws aws-kms aws-lambda aws-terraform certificate-authority certificates developer-tools devops openssh openssl security security-tools serverless ssh ssh-ca ssh-certificate-authorities ssh-certificate-authority ssh-certificates

Last synced: about 1 month ago
JSON representation

Certonid is a Serverless SSH Certificate Authority

• Host: GitHub
• URL: https://github.com/certonid/certonid
• Owner: certonid
• License: mit
• Created: 2019-08-25T21:05:29.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2024-04-19T13:03:31.000Z (5 months ago)
• Last Synced: 2024-07-08T22:13:31.289Z (2 months ago)
• Topics: aws, aws-kms, aws-lambda, aws-terraform, certificate-authority, certificates, developer-tools, devops, openssh, openssl, security, security-tools, serverless, ssh, ssh-ca, ssh-certificate-authorities, ssh-certificate-authority, ssh-certificates
• Language: Go
• Homepage:
• Size: 7.07 MB
• Stars: 74
• Watchers: 7
• Forks: 6
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
# Certonid [![Build and Release](https://github.com/certonid/certonid/actions/workflows/build-and-release.yml/badge.svg)](https://github.com/certonid/certonid/actions/workflows/build-and-release.yml)

Certonid is a Serverless SSH Certificate Authority.

Consists of two parts: CLI and serverless function.

![certonid-schema](https://user-images.githubusercontent.com/98444/109483362-cdfcc300-7a87-11eb-8453-fa9d2c6d930a.png)

## Releases

[Download latest releases](https://github.com/certonid/certonid/releases)

For Mac OS or Linux you can use [Homebrew tap](https://docs.brew.sh/Taps):

```bash

brew install certonid/tap/certonid

```

or another way:

```bash

brew tap certonid/tap

brew install certonid

```

## Documentation

[All information published at Wiki page](https://github.com/certonid/certonid/wiki)

## Articles

 - [[English] Certonid — the SSH Certificate Authority Deployed on AWS Lambda](https://mailtrap.io/blog/certonid/)

 - [[Russian] Certonid — SSH центр сертификации, который работает на AWS Lambda](https://dou.ua/lenta/articles/certonid-ssh/)

## AWS Terraform module

To simplify setup on AWS, you can use [Certonid AWS Terraform module](https://registry.terraform.io/modules/certonid/certonid/aws/latest)

## Binaries security

`checksum.txt` signed by gpg key. You can check its by downloading with archive it `.sig` file and verify signature:

```bash

$ gpg --verify checksums.txt.sig checksums.txt

gpg: Signature made Fri Jul 22 17:24:40 2022 EEST

gpg:                using RSA key 36E7986334C6DE2B41A29537A77A9969BEFF93AE

gpg: Good signature from "Certonid Sign Key (Certonid Sign Key) "

```

Each archive have [SBOM file](https://www.ntia.gov/SBOM).

## Dev build

```shell

$ cd serverless && GOOS=linux go build -o serverless main.go

$ cd ..

$ cd cli && go build -o certonid main.go

```

## Roadmap

 - [ ] Add tests

 - [ ] Improve documentation

 - [ ] Website and video

 - [ ] Use serverless framework to automate deploy and setup

 - [ ] Support AWS S3 for SSH CA key