Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

TLS (Transport Layer Security)

TLS (Transport Layer Security) is a cryptographic protocol designed to provide communications security over a computer network. The protocol is widely used in applications such as email, instant messaging, and voice over IP, but its use in securing HTTPS remains the most publicly visible.

The TLS protocol aims primarily to provide security, including privacy (confidentiality), integrity, and authenticity through the use of cryptography, such as the use of certificates, between two or more communicating computer applications. It runs in the presentation layer and is itself composed of two layers: the TLS record and the TLS handshake protocols.

TLS builds on the now-deprecated SSL (Secure Sockets Layer) specifications (1994, 1995, 1996) developed by Netscape Communications for adding the HTTPS protocol to their Navigator web browser.

https://github.com/madflojo/redis-tls-dockerfile

Redis + TLS Docker image

docker dockerfile redis stunnel tls

Last synced: 24 Apr 2025

https://github.com/oneclickvirt/gostun

本机NAT类型检测工具(Local NAT type detection tool)(NatTypeTester)

detector freebsd goecs linux nat nattype nattypetester openbsd rfc3489 rfc4787 rfc5780 stun tcp tls udp

Last synced: 24 Oct 2025

https://gitlab.com/coroner/cryptolyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.

DNSSEC HASSH HTTP headers JA3 LMTP MySQL/MariaDB POP3 RDP TLSv1.3 audit auditing certificate-transparency cryptography cybersecurity tools forward security ftp imap jabber ldap library mailsieve nntp openvpn pentest postgresql python root certificate scanner-cli security security scan security tools security-scanner security-tools sieve smtp ssh ssh keys sshkeys ssl tls tls13 vulnerability scanning xmpp xmpp-transport

Last synced: 30 Apr 2025

https://github.com/cosmos72/gls

Fast goroutine local storage

go goroutine-safe thread-local tls

Last synced: 21 Mar 2025

https://github.com/gremwell/qsslcaudit

test SSL/TLS clients how secure they are

certificate certificate-validation dtls openssl security ssl tls

Last synced: 30 Apr 2025

https://github.com/lechgu/tinyca

TinyCA: A simple Certificate Authority

certificate ssl tls

Last synced: 17 Jan 2026

https://github.com/Cloaked9000/frnetlib

Small and fast cross-platform networking library, with support for messaging, IPv6, HTTP, SSL and WebSocket.

http https ipv4 ipv6 messaging networking socket ssl tcp tls websocket websocket-client websocket-library websocket-server

Last synced: 08 May 2025

https://github.com/luukdegram/feilich

Small, no dependency, TLS 1.3 implementation in Zig, for Zig.

security tls tls13 web zig ziglang

Last synced: 15 Apr 2025

https://github.com/fluent/kafka-connect-fluentd

Kafka Connect for Fluentd

fluentd kafka tls

Last synced: 05 Jul 2025

https://github.com/cloudposse/terraform-aws-ssm-tls-ssh-key-pair

Terraform module that provisions an SSH TLS Key pair and writes it to SSM Parameter Store

atlantis aws chamber cicd hcl2 key-rotation keypair kms openssh privatekey publickey ssh ssm terraform terraform-module tls

Last synced: 29 Apr 2025

https://github.com/kassane/openssl-zig

TLS/SSL and crypto library (uses Zig Build)

cross-compile cryptography openssl openssl-library ssl tls zig-package

Last synced: 06 May 2025

https://github.com/hartwork/docker-ssl-reverse-proxy

:lock: Easy-to-use auto-SSL reverse proxy as a Docker container based on Caddy and Let’s Encrypt

caddy docker docker-compose docker-image https lets-encrypt letsencrypt proxy python python-3 python3 reverse-proxy reverseproxy ssl ssl-proxy tls tls-proxy

Last synced: 18 Sep 2025

https://github.com/cbuijs/sdproxy

DNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control.

ads blocking control dns doh doh3 doq filtering forwarding golang https openwrt parental-control proxy quic security tcp tls tracking udp

Last synced: 01 Apr 2026

https://github.com/samrocketman/my_internal_ca

A set of basic scripts for managing an internal certificate authority.

certificate-authorities certificate-authority subject-alternative-name tls tls-certificate-management

Last synced: 13 Jul 2025

https://github.com/scratch-net/telego

High-performance Telegram MTProxy with TLS fronting, probe resistance, and per-user analytics. Bypass censorship undetected.

anti-censorship censorship-circumvention firewall-bypass gnet golang internet-freedom mtproto mtproto-proxy mtproxy obfuscation privacy proxy russia telegram tls

Last synced: 12 Apr 2026

https://github.com/spaze/letsgetacert

Let's get cert – a Certbot wrapper

certbot certificate https letsencrypt ssl tls

Last synced: 08 Apr 2025

https://github.com/fleshgrinder/nginx-session-ticket-key-rotation

Nginx session ticket key rotation program for secure rotation of TLS session ticket keys and sharing in server clusters.

nginx nginx-configuration shell ssl tls tls-session-ticket-keys tls-session-tickets

Last synced: 12 Apr 2025

https://github.com/zliuva/ktlswrapper

A wrapper that enables TLS support (TLS 1.2 with AES 128 GCM) for existing applications without code change.

c kernel ld-preload sockets tls

Last synced: 11 May 2025

https://github.com/jbl19860422/mms-server

MMS is a high-performance, multi-threaded, and multi-coroutine real-time streaming server implemented in C++20. It currently supports rtmp[s]/http[s]-flv/http[s]-hls/http[s]-ts/rtsp[s]/webrtc.

cpp20 dash hls hls-live-streaming http-flv live-streaming rtmp rtmps rtsp tls ts webrtc websocket whep whip

Last synced: 08 Jul 2025

https://github.com/rushiimachine/caddy-ja3

A caddy plugin that gets JA3 TLS fingerprints from requests.

caddy caddy-plugin go ja3 tls tls-fingerprint

Last synced: 14 Apr 2025

https://github.com/WoTTsecurity/agent

Simple security audit for linux systems

cis-benchmark security tls

Last synced: 11 Mar 2025

https://github.com/syncsynchalt/dime-a-tap

Man-in-the-middle TLS intercept proxy with tcpdumpable loopback

hackertools im-in mitm proxy ssl tcpdump tls

Last synced: 12 Jan 2026

https://github.com/g-andrade/tls_certificate_check

CA store + Partial chain handler

castore certificate-authority https ssl tls

Last synced: 05 Apr 2025

https://github.com/thomwiggers/kemtls-experiment

Experimental implementation of KEMTLS in Rustls

cryptography kemtls post-quantum post-quantum-tls rustls tls

Last synced: 08 Jul 2025

https://github.com/tuankiri/socks5

A fully featured implementation of the SOCKS 5 protocol in golang. Command CONNECT ✅, BIND 🛠, UDP ASSOCIATE ✅.

bind connect go golang proxy socks socks5 socks5h tcp-proxy tls udp udp-associate udp-proxy

Last synced: 31 Aug 2025

https://github.com/travisjeffery/certmagic-sqlstorage

SQL storage for CertMagic/Caddy TLS data.

caddy certificates certmagic ssl tls

Last synced: 15 Apr 2025

https://github.com/khoih-prog/AsyncMQTT_ESP32

Arduino Library for ESP32/S2/S3/C3 asynchronous MQTT client implementation. This library, ported to support ESP32/S2/S3/C3, WT32_ETH01 (ESP32 + LAN8720), ESP32 using LwIP ENC28J60, W5500, W6100 or LAN8720. Supporting TLS/SSL for MQTTS Client

async async-mqtt async-mqtt-client async-mqtts esp32 esp32-c3 esp32-s2 esp32-s3 fingerprint lwip lwip-enc28j60 lwip-ethernet lwip-lan8720 lwip-w5500 lwip-w6100 ssl tls w5500 w6100 wt32-eth01

Last synced: 11 Mar 2025

https://github.com/ojroques/tls-malware-detection

The report of a supervised classifier to detect malware in TLS traffic

classifier malware-detection msc-project msc-thesis tls

Last synced: 06 Mar 2026

https://github.com/jsimonetti/sniqueue

Using nfqueue to accept or drop flows destined for SNI domainnames

nfqueue nftables quic sni tls

Last synced: 17 Jan 2026

https://github.com/crabtree/mtls-transmitter

Reverse proxy injecting client certificate for mTLS communication

certificate golang hacktoberfest mtls mutual-tls proxy reverse-proxy ssl tls tls-proxy

Last synced: 30 Oct 2025

https://github.com/hairyhenderson/github-responder

A library & CLI tool that automatically sets up GitHub WebHooks and listens for events, with automatic TLS

cli devops github github-webhooks gitops go golang-library hacktoberfest letsencrypt tls

Last synced: 15 Apr 2025

https://github.com/micromaomao/ctclient

Certificate Transparency Log client suitable for monitoring, quick SCT validation, gossiping, etc.

certificate-transparency cryptography openssl pki rust tls

Last synced: 27 Jul 2025

https://github.com/irinesistiana/mos-tls-tunnel

Archived. Check this out https://github.com/IrineSistiana/simple-tls

cdn mos-tls-tunnel obfuscate plugin shadowsocks shadowsocks-android shadowsocks-manyuser sip003 tls tls13 websocket

Last synced: 04 Oct 2025

https://github.com/pusateri/DNS-TLS

iOS 11+ DNS Network Extension for TLS Proxy

dns extension ios network tls

Last synced: 11 Mar 2025

https://github.com/gworley3/httpray

Non-blocking HTTP library for Ruby

http http-client non-blocking nonblocking-sockets ruby tls tls-support

Last synced: 23 Aug 2025

https://github.com/huntlabs/hunt-net

High-performance network library for D programming language, event-driven asynchonous implemention(IOCP / kqueue / epoll).

codec socket ssl tcp tls udp

Last synced: 18 Feb 2026

https://github.com/captchanjack/jedis.jl

A fully featured Julia Redis client.

julia lock pipeline pubsub redis redis-client ssl tls

Last synced: 11 Jun 2025

https://github.com/pusateri/dns-tls

iOS 11+ DNS Network Extension for TLS Proxy

dns extension ios network tls

Last synced: 01 Mar 2025

https://github.com/essentialkaos/sslscan

Go package for working with SSLLabs API

golang scan ssl ssllabs tls

Last synced: 15 Jul 2025

https://github.com/essentialkaos/sslcli

Pretty awesome command-line client for public SSLLabs API

ssl ssllabs tls utility

Last synced: 15 Jul 2025

https://github.com/shuque/danetls

Program to test DANE enabled TLS Services

authentication check dane dnssec tls

Last synced: 15 Jul 2025

https://github.com/zekiunal/openssl-certificate-authority-guide

Bu kılavuz, OpenSSL komut satırı araçlarını kullanarak kendi sertifika yetkilinizi (CA) kurup nasıl kullanacağınızı gösterir.

certificate-authority openssl security tls turkce turkish

Last synced: 28 Jan 2026

https://github.com/sagi/node-dns-over-tls

DNS-over-TLS API for Node.js

dns dns-over-tls dnstls nodejs privacy security tls

Last synced: 05 May 2025

https://github.com/cuonglm/quicsni

Reading SNI value from quic Initial Packet.

go golang http3 quic sni tls

Last synced: 12 Oct 2025

https://github.com/mk-fg/acme-cert-tool

Simple one-stop tool to manage X.509/TLS certs and all the ACME CA authorization stuff

acme-client certificates cryptography letsencrypt python security sysadmin tls tool web-pki x509

Last synced: 23 Apr 2025

https://github.com/kubearmor/k8tls

k8tls (pronounced cattles), to assess server port security by detecting its TLS and certificates configuration.

certificate k8s kubernetes openssl rsa services ssl tls

Last synced: 07 May 2025

https://github.com/shawnmckinney/apache-fortress-demo

Sample web app to demo end-to-end security w/ JavaEE, Spring Security and RBAC fine-grained authorization. All connections use SSL.

apache-fortress authorization java-security javaee-security ldap ldap-server rbac role-based-access-control spring-security spring-security-web tls tls-certificate tomcat tomcat-security

Last synced: 12 Feb 2026

https://github.com/hex-five/multizone-iot-sdk

MultiZone® Trusted Firmware is the quick and safe way to build secure IoT applications with any RISC-V processor. It provides secure access to commercial and private IoT clouds, real-time monitoring, secure boot, and remote firmware updates. The built-in Trusted Execution Environment provides hardware-enforced separation ...

attestation digilent-arty-board embedded-systems firmware freertos iot lwip mbedtls mqtt multizone ota-firmware-updates risc-v root-of-trust secure-boot tcp-ip tee tls trusted-execution-environment trustzone xilinx-fpga

Last synced: 20 Apr 2025

https://github.com/vpxuser/proxy

中间人攻击代理工具，目前已实现端口复用HTTP、SOCKS5协议的透明代理，HTTP、TLS中间人攻击

burpsuite charles convert http https mitm pentest protocol proxifier proxy socks5 ssl tls tunnel yakit yaklang

Last synced: 14 Jan 2026

https://github.com/ericsson/xcm

The Extensible Connection-oriented Messaging (XCM) library.

cloud-native embedded messaging tls

Last synced: 29 Jan 2026

https://github.com/openloadbalancer/olb

High-performance zero-dependency L4/L7 load balancer written in Go. Single binary with Web UI, clustering, MCP/AI integration. 8.5K RPS, 39 E2E tests.

acme clustering go golang l4 l7 load-balancer mcp raft rate-limiting reverse-proxy tls waf web-ui zero-dependency

Last synced: 16 Apr 2026

https://github.com/fcjr/aia-transport-go

AIA (Authority Information Access) Transport Go provides a pre-configured http.Transport to enable AIA certificate chain resolution for resolving urls with incomplete certificate chains.

aia authority-information-access certificate-chain go golang incomplete-certificate-chain ssl tls x509

Last synced: 04 Apr 2026

https://github.com/systemli/mail-tls-helper

Postfix helper for mandatory TLS

postfix postfix-helper python security tls

Last synced: 12 Jul 2025

https://github.com/rkoopmans/python-certificate-chain-resolver

Resolve the certificate chains (leaf, intermediate, and the root) for x509 certificates using the CLI or Python API. It supports PEM, DER, and PKCS7 formats and custom root certificate stores.

certificate-management certificate-validation certificates cli der pem pkcs7 python tls x509

Last synced: 12 Jan 2026

https://github.com/salrashid123/envoy_mtls

Sample configuration for HTTP and Network mTLS using envoy yaml

certificate envoy envoyproxy https ssl tls

Last synced: 29 Jul 2025

https://github.com/jay-johnson/restapi

A secure-by-default, async Rest API with hyper, tokio, bb8, kafka-threadpool, postgres and prometheus for monitoring. Includes: a working user management and authentication backend written for postgres, async s3 uploading/downloading, async publishing to kafka with mTLS for encryption in transit

bb8 docker-compose ecdsa encryption helm hyper jwt kafka pgadmin4 postgres prometheus rest-api rest-framework rust s3-uploader s3-uploads tls tokio user-auth user-authenication

Last synced: 14 Apr 2025

https://github.com/c-cube/thread-local-storage

thread-local storage for OCaml

ocaml thread tls

Last synced: 24 Oct 2025

https://github.com/veyselaksin/gomailer

Simple Golang Mail Sender Library using with SSL and TLS

golang golang-library golang-package mail mailsender mailsender-packege ssl tls

Last synced: 14 Jan 2026

https://github.com/pedroalbanese/edgetk

🔒 Encrypted Data Gateway Engine - Command-line Integrated Security Suite written in Go (OpenSSL compliant)

aria blake2 camellia chacha20 ecdsa-cryptography ed25519 golang gost3410-2012 kuznechik openssl poly1305 rsa-cryptography seed sm2 sm3 sm4 streebog tlcp tls whirlpool

Last synced: 12 Feb 2026

https://github.com/piercefreeman/grooveproxy

Groove, a crawling and unit test optimized MITM proxy server.

golang http-proxy mitm mitmproxy nodejs proxy python tls

Last synced: 11 Apr 2025

https://github.com/suse/helm-certgen

Helm plugin for generation of TLS certificates

helm helm-charts helm-plugin k8s kubernetes tls tls-certificate

Last synced: 06 Mar 2026

https://github.com/kerosene-labs/kindling

The fuel that'll ignite your application. A programmable TLS HTTP/1.1 server with no dependencies.

framework java lightweight ssl tls web-server

Last synced: 15 Apr 2025

https://github.com/nabla-c0d3/tls_parser

Small library to parse TLS records.

library python ssl sslyze tls

Last synced: 17 Mar 2025

https://github.com/eurecom-s3/x-ray-tls

Generic and transparent TLS inspection for local programs

network-analysis tls

Last synced: 20 Jan 2026

https://github.com/gaukas/clienthellod

TLS ClientHello/QUIC Initial Packet reflection service

clienthello quic quic-fingerprint tls tls-fingerprint

Last synced: 14 Apr 2025

https://github.com/albertodonato/h2static

Tiny static web server with TLS and HTTP/2 support

http-server http2 https-server json-format serving-files static-server tls

Last synced: 01 May 2025

https://github.com/spinoco/fs2-crypto

Crypto support for fs2

fs2 https security security-tools ssl tls

Last synced: 29 Oct 2025

https://github.com/mathewmarcus/stoptls

MitM proxy which performs opportunistic SSL/TLS stripping

aiohttp asyncio man-in-the-middle python3 ssl tls

Last synced: 17 Jan 2026

https://github.com/michaelforney/x509cert

Tool and library for generating X.509 certificates and certificate requests (mirror)

bearssl tls x509

Last synced: 13 Apr 2025

https://github.com/ahf/onion-x509

Create x509 CAs and Certificates using your Onion Service keys.

hidden-service onion-service tls tor x509

Last synced: 11 Sep 2025

https://github.com/esadcetiner/secure-nginx-config

Fast and Secure by default Nginx configuration template

cis-benchmark cis-hardening https nginx ocsp-stapling security ssl tls

Last synced: 26 Apr 2025

https://github.com/contiv/auth_proxy

A proxy + UI server for Contiv which handles authentication (local users/LDAP/AD) + authorization (RBAC)

contiv rbac tenant tls ui

Last synced: 11 Apr 2025

https://github.com/guardsquare/android-insecure-tls-demo

Hands-on experiments to demonstrate the exploitability of insecure TLS configurations in Android apps

android appsec docker-compose https man-in-the-middle tls

Last synced: 10 Apr 2025

https://github.com/simonmittag/mse6

mse6 is a mock HTTP/TLS server for integration tests and edge cases. It supports slow HTTP responses, bad content encoding, sudden crashes, network termination and other abnormal behaviour that is otherwise difficult to observe or reproduce under test conditions.

bad-code bad-idea bad-ideas chaos-engineering chaos-monkey cicd continuous-integration http http-server https integration-testing slowhttptest slowmotion testing testing-tools tls unit-testing websockets

Last synced: 29 Oct 2025

https://github.com/joemiller/certin

Go lib (and CLI) for quick creation of TLS keys and certificates for use in tests

cert certificates go golang golang-library pki tls

Last synced: 12 Apr 2025

https://github.com/szazeski/checkssl

simple cross platform command line tool to check ssl https certificate and chain is valid and not expired

certificate checkssl cli devops-tools golang https ssl tls

Last synced: 15 Feb 2026

https://github.com/yinheli/tencentsig

😜golang 原生支持的 腾讯云 usersig 生成库

tencent tls usersig

Last synced: 03 Aug 2025

https://github.com/dunkelstern/mbedtls-esp8266

Updated and Upgraded mbedTLS library for the ESP8266 (probably ESP32 too)

chacha20 crypto ed25519 embedded esp8266 hkdf mbedtls poly1305 srp tls

Last synced: 30 Oct 2025

https://github.com/luizhlelis/go-lang-https-self-signed

Sample of a self signed certificate https server in golang. This repo demonstrates to you the best way to up your self signed cert in golang. It shows in a simple way how to generate and trust the ssl certificate and how to serve a https server in golang.

golang https https-server ssl ssl-certificates tls tls-certificate

Last synced: 29 Jul 2025

https://github.com/beetlex-io/mqtt

high performance .NET library for MQTT based communication support v3.x and v5.0 protocols

csharp iot mqtt mqtt-client mqtt-protocol mqtt-server net netcore tcp tls websocket

Last synced: 19 Mar 2025

https://github.com/kapetan-io/tackle

A collection of small but useful packages with no external dependencies

certificates color config golang goroutines library logging testing-tools time tls tools workgroup

Last synced: 07 Mar 2026

TLS (Transport Layer Security) Awesome Lists
awesome-tls-hacks 38 awesome-tls-security 80
TLS (Transport Layer Security) Categories
SSL/TLS Hacks 74 Attacks on TLS 24 Protocols 23 SSL Interception 15 PKIX 13 Tools 11 Popular Open Source Implementations of SSL/TLS 9 Certificates / PKIX 5 Vulnerabilities with Details 4 SSL/TLS Protocol History 2 Pervasive Monitoring 2 Some Open Source Implementations of SSL/TLS 1 Trends 1