🍺 BREW Explorer

← all formulae

certstrap

brew install certstrap v1.3.0 Apache-2.0

Tools to bootstrap CAs, certificate requests, and signed certificates

22
30-day installs · #6573
34
90-day · #8367
197
365-day · #7404
2.4k
★ GitHub stars · updated 6mo ago

Build dependencies

go

GitHub topics

bootstrap certificate certificate-authority crypto csr golang ssl tls

Links

Raw metadata
{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [
    "go"
  ],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Tools to bootstrap CAs, certificate requests, and signed certificates",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:36:16+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "certstrap",
  "github_default_branch": "master",
  "github_last_commit_at": "2026-02-03T22:27:34Z",
  "github_readme_excerpt": "# certstrap\n[![godoc](http://img.shields.io/badge/godoc-certstrap-blue.svg?style=flat)](https://godoc.org/github.com/square/certstrap)\n[![CI](https://github.com/square/certstrap/actions/workflows/go.yml/badge.svg)](https://github.com/square/certstrap/actions/workflows/go.yml)\n[![license](http://img.shields.io/badge/license-apache_2.0-red.svg?style=flat)](https://raw.githubusercontent.com/square/certstrap/master/LICENSE)\n\nA simple certificate manager written in Go, to bootstrap your own certificate authority and public key infrastructure.  Adapted from etcd-ca.\n\ncertstrap is a very convenient app if you don\u0027t feel like dealing with openssl, its myriad of options or config files.\n\n## Common Uses\n\ncertstrap allows you to build your own certificate system:\n\n1. Initialize certificate authorities\n2. Create identities and certificate signature requests for hosts\n3. Sign and generate certificates\n\n## Certificate architecture\n\ncertstrap can init multiple certificate authorities to sign certificates with.  Users can make arbitrarily long certificate chains by using signed hosts to sign later certificate requests, as well.\n\n## Examples\n\n## Getting Started\n\n### Building\n\ncertstrap must be built with Go 1.18+. You can build certstrap from source:\n\n```\n$ git clone https://github.com/square/certstrap\n$ cd certstrap\n$ go build\n```\n\nThis will generate a binary called `certstrap` under project root folder.\n\n### Initialize a new certificate authority:\n\n```\n$ ./certstrap init --common-name \"CertAuth\"\nCreated out/CertAuth.key\nCreated out/CertAuth.crt\nCreated out/CertAuth.crl\n```\n\nNote that the `-common-name` flag is required, and will be used to name output files.\n\nMoreover, this will also generate a new keypair for the Certificate Authority,\nthough you can use a pre-existing private PEM key with the `-key` flag.\n\nIf the CN contains spaces, certstrap will change them to underscores in the filename for easier use.  The spaces will be preserved inside the fields of the generated files:\n\n`",
  "github_repo": "square/certstrap",
  "github_stars": 2448,
  "github_topics": [
    "bootstrap",
    "certificate",
    "certificate-authority",
    "crypto",
    "csr",
    "golang",
    "ssl",
    "tls"
  ],
  "homepage": "https://github.com/square/certstrap",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 22,
  "installs_365d": 197,
  "installs_90d": 34,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "Apache-2.0",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "certstrap",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 6573,
  "rank_365d": 7404,
  "rank_90d": 8367,
  "raw_hash": "09492963df8aeb51",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/c/certstrap.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "1.3.0",
  "versioned_formulae": [],
  "why_use_this": null
}