Keywhiz is a system for managing and distributing secrets.  Keywhiz servers in a cluster centrally store secrets encrypted in a database. Clients use mutually authenticated TLS (mTLS) to retrieve secrets they have access to. Authenticated users administer Keywhiz via CLI or web app UI. To enable workflows, Keywhiz has automation APIs over mTLS and support for simple secret generation plugins.

Keywhiz -  A system for distributing and managing secrets

Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Vault handles leasing, key revocation, key rolling, and auditing. Vault presents a unified API to access multiple backends: HSMs, AWS IAM, SQL databases, raw key/value, and more. 

Vault - A tool for managing secrets

Confidant is a open source secret management service that provides user-friendly storage and access to secrets in a secure way, from the developers at Lyft.  Confidant stores secrets in an append-only way in DynamoDB, generating a unique KMS data key for every revision of every secret, using Fernet symmetric authenticated cryptography. 

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

The Dogtag Certificate System is an enterprise-class open source Certificate Authority (CA). It is a full-featured system, and has been hardened by real-world deployments. It supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management, and much more. It supports Certificate issuance, revocation, and retrieval, Certificate Revocation List (CRL) generation and publishing, Encryption key archival and recovery and lot more.

Dogtag - Certificate System

The OpenXPKI project has the vision to publish a software stack that provides all necessary components to manage keys and certificates primarily based on the X509v3 cryptography standard.
<ul>
    <li>WebUI compatible with all major browsers</li>
    <li>Ready-to-run example config included</li>
    <li>Support for SCEP (Simple Certificate Enrollment Protocol)</li>
    <li>Easy adjustment of workflows to personal needs</li>
    <li>Run multiple separate CAs with a single installation, automated rollover of CA generations</li>
    <li>Can use Hardware Security Modules (e. g. Thales HSMs) for crypto operations</li>
    <li>Issue certificates with public trusted CAs (e. g. SwissSign, Comodo, VeriSign)</li>
    <li>Based on OpenSSL and Perl, runs on most *nix platforms</li>
    <li>100% Open Source, commercial support available</li>
    </ul>

The OpenXPKI project has the vision to publish a software stack that provides all necessary components to manage keys and certificates primarily based on the X509v3 cryptography standard.

Openxpki - Manage Keys and Certificate

Discover open source projects across all platforms

Projects

Keywhiz - A system for distributing and managing secrets

Vault - A tool for managing secrets

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

Dogtag - Certificate System

Openxpki - Manage Keys and Certificate

TechStack

Tagcloud

License

Suggested keywords:

Projects

Keywhiz - A system for distributing and managing secrets

Vault - A tool for managing secrets

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

Dogtag - Certificate System

Openxpki - Manage Keys and Certificate

TechStack

Tagcloud

License