reddec / ssl-cp

SSL control panel with API

SSL-CP

Control panel for organize, manager, sign and revoke certificates. Project is still under heavy development but it's already using for internal projects.

Docker

Look at Dockerfile or pull from dockerhub https://hub.docker.com/r/reddec/ssl-cp/

Install

Requirements: python3, virtual environment

1. Download or clone archive from github
2. Unpack and cd to directory with sources
3. Create virtual environment: python3 -m venv venv
4. Enable it: . ./venv/bin/activate
5. Install requirements: pip3 install -r requirements.txt
6. Run it: python3 main.py

Features

• PEM + PFX export
• 4096 key size
• SHA-256

Web UI + API

Yes, ssl-cp contains full-featured mobile friendly flask-based panel. And automation friendly API!

Multi-project

System allows you separate certificates by projects. Each project contains own CA (private key + public cert) and list of issued (signed by CA) certificates.

Auto-generated CA

One click for generate self-signed CA. In roadmap - upload your own

After generation you can download and use it as always

Use your own CA

You can import your own public and private CA certificate and key.

One-click generation of signed certifiactes

Just provide common name (it maybe any label, node name, domain and e.t.c) and press generate. New certificate will be automatically signed by CA

View and manage each certificate:

• Download
• Revoke
• Use cookbooks

Use cook-books

Stunnel

stunnel on Wiki - SSL it! Even if it was not originally designed for SSL.

Panel can prepare full-featured archive (including SystemD service file and install script) for client and server configuration of stunnel

Nginx

Basic and with client certificate authorization

ssl-cp's Issues

Feature Request: Support ACME protocol

ACME is a protocol to automate certificate requests from webservers. You could support it to make it easier to obtain self-signed certificates.

https://github.com/ietf-wg-acme/acme/

Your project is a bit complicated, I can’t understand, can you help me see where I went wrong

https://github.com/XRSec/ssl-tools/blob/dev/sslt.go