2020-05-23 22:42:53 +02:00
|
|
|
CFSSL is Cloudflare's PKI/TLS swiss army knife. It is both a command line tool
|
2020-05-23 20:28:12 +02:00
|
|
|
and an HTTP API server for signing, verifying, and bundling TLS certificates.
|
|
|
|
|
|
2020-05-23 22:42:53 +02:00
|
|
|
CFSSL consists of:
|
|
|
|
|
* a set of packages useful for building custom TLS PKI tools
|
|
|
|
|
* the cfssl program, which is the canonical command line utility using the
|
|
|
|
|
CFSSL packages
|
|
|
|
|
* the multirootca program, which is a certificate authority server that can use
|
|
|
|
|
multiple signing keys
|
|
|
|
|
* the mkbundle program is used to build certificate pool bundles
|
|
|
|
|
* the cfssljson program, which takes the JSON output from the cfssl and
|
|
|
|
|
multirootca programs and writes certificates, keys, CSRs, and bundles to disk
|
