https://github.com/synrc/ca
🛡️ CA: Certificate Authority. ДСТУ: 4145. ITU/IETF: 3279, 5755, 7030, X.509.
https://github.com/synrc/ca
cypher ecc enroll ntru ocsp pki rsa sign
Last synced: 4 months ago
JSON representation
🛡️ CA: Certificate Authority. ДСТУ: 4145. ITU/IETF: 3279, 5755, 7030, X.509.
- Host: GitHub
- URL: https://github.com/synrc/ca
- Owner: synrc
- License: other
- Created: 2019-08-08T11:18:00.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2024-11-21T18:37:40.000Z (5 months ago)
- Last Synced: 2024-11-24T16:52:55.379Z (5 months ago)
- Topics: cypher, ecc, enroll, ntru, ocsp, pki, rsa, sign
- Language: Erlang
- Homepage: https://authority.erp.uno
- Size: 4.51 MB
- Stars: 17
- Watchers: 3
- Forks: 6
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- fucking-awesome-elixir - ca - Certificate Authority. (Security)
- awesome-elixir - ca - Certificate Authority. (Security)
README
# SYNRC 🛡️ CA
[](https://github.com/synrc/ca/actions)
[](https://hex.pm/packages/ca)
## Features
* PKI entities: `CA`, `RA`, `SERVER`, `CLIENT`, `HUMAN`, `PROGRAM`
* Key purposes: `TLS`, `ECDSA`, `AES`, `SSH`, `SCVP`, `IPSEC`, `CMC`, `SIP`, `CAP`, `EAP`, `BGP`, `OCSP`
* EUID documents: `TAXID`, `PID`, `IBAN`, `HIID`, `LOYAL`
* Curve profiles: `secp256k1`, `secp384r1`, `secp521r1`
* DH Schemes: `RSA`, `GF(p)`, `GF(2^m)`
* RFC: CMS, PKCS-10, CMP, ESP, OCSP, TSP
* Ports: CMP (TCP 8829), EST (HTTP 8047), CMC (TCP 5318)
* Size: 2000 LOC
* ECDSA: Pure Elixir
* CMS: Pure Elixir
* Support for DSTU-4145 Polynomials over Binary Galois Fields GF(2^m) envelops
## Documentation
* Hex Docs https://hexdocs.pm/ca/api-reference.html
## Online Instances
* https://authority.erp.uno
## How to use?
On Windows:
```
c:\Progra~1\OpenSSL-Win64\bin\openssl.exe ecparam -name secp384r1 -genkey | Out-File -Encoding utf8 "1.txt"
c:\Progra~1\OpenSSL-Win64\bin\openssl.exe req -passout pass:0 -new -key 1.txt -keyout dima.key.enc -out dima.csr -subj "/C=FI/ST=Helsinki/O=AR.VO/CN=A13" 2>null
c:\Progra~1\OpenSSL-Win64/bin/openssl.exe cmp -cmd p10cr -server http://ca.synrc.com:8829/ -secret pass:0000 -ref cmptestp10cr -csr dima.csr -certout dima.pem
```
On UNIX:
```
$ openssl req -passout pass:0 -new -newkey ec:<(openssl ecparam -name secp384r1) -keyout dima.key.enc -out dima.csr -subj "/C=UA/ST=Kyiv/O=SYNRC/CN=dima"
$ openssl cmp -cmd p10cr -server "ca.synrc.com":8829 -secret pass:0000 -ref cmptestp10cr -certout dima.pem -csr dima.csr
```
## Publications
* 2010-10-18 LDAP
* 2020-02-03 Кваліфікований Електронний Підпис
* 2023-06-22 CMS Месенжер (Пітч)
* 2023-06-30 ЧАТ X.509 (Домашня сторінка)
* 2023-07-05 CMS S/MIME
* 2023-07-16 CMS Compliance
* 2023-07-20 LDAP Compliance
* 2023-07-25 LDAP 13.7.24 (Домашня сторінка)
* 2023-07-30 CA X.509 (Домашня сторінка)
* 2023-07-21 CMP/CMC/EST
* 2023-07-21 MLS ROOM CHAT
* 2023-08-05 CA CURVE
* 2023-08-07 CHAT ASN.1
* 2023-08-08 ASN.1 Компілятор
* 2024-10-29 EST сервер 7030
* 2024-11-17 EUDI
* 2024-11-20 CBOR COSE
* 2024-11-21 MSO MDoc
## Credits
Максим Сохацький