https://github.com/rustls/upki
https://github.com/rustls/upki
Last synced: 4 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/rustls/upki
- Owner: rustls
- License: apache-2.0
- Created: 2025-11-28T17:32:42.000Z (6 months ago)
- Default Branch: main
- Last Pushed: 2026-01-23T07:10:24.000Z (4 months ago)
- Last Synced: 2026-01-23T07:15:25.395Z (4 months ago)
- Language: Rust
- Size: 558 KB
- Stars: 2
- Watchers: 4
- Forks: 0
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
- License: LICENSE-APACHE
Awesome Lists containing this project
README
**upki** brings browser-grade certificate infrastructure to Linux.
The first goal of this project is to provide reliable, privacy-preserving
and efficient certificate revocation building on foundational work by Mozilla.
Later goals include intermediate preloading, certificate transparency enforcement,
replicating common root distrust processes, and supporting deployment of
Merkle Tree Certificates.
## Revocation
This is for checking revocation status for certificates issued by publicly-trusted
authorities. It uses [crlite-clubcard](https://eprint.iacr.org/2025/610). This requires
a data set that updates several times per day. `upki` therefore includes a synchronization
component, which fetches updated data. You can run `upki fetch` to do this at any time,
but ideally it is run system-wide as [arranged by packagers](PACKAGING.md).
There are a number of interfaces available:
### Command-line interface
This is useful for monitoring, testing and alerting purposes.
```shell
$ curl -w '%{certs}' https://google.com | upki revocation-check high
(...)
NotRevoked
```
There is a further, low-level command-line interface -- see `upki revocation detail --help` for
more.
### C-FFI interface
TODO
### Rust crate
TODO
# Packaging
See [PACKAGING.md](PACKAGING.md).
# License
upki is distributed under the following two licenses:
- Apache License version 2.0.
- MIT license.
These are included as LICENSE-APACHE and LICENSE-MIT respectively. You
may use this software under the terms of any of these licenses, at your
option.