KeyStore Explorer
TinyCA
OpenXPKI
EJBCA
Marlin
OptiSigns
Dogtag PKI
Concerto Digital Signage
BastionXP
Smallstep Certificates
Teleport Database Access
OpenXPKI
cotunnel
AstroRelay
Vault by HashiCorp
Smallstep SSH
BastionXP is a Public Key Infrastructure (PKI) / Certificate Authority (CA) that creates, signs and distributes SSH, SSL/TLS X.509 certificates to servers and end users upon successful SSO login and 2FA authentication via OAuth providers such as GitHub, G-Suite, Microsoft Office 365, Okta and more.
BastionXP automates certificate management at scale, while simplifying your end-user workflow without compromising security.
BastionXP also has a built-in SSH proxy server that can be configured to function as an SSH bastion host. BastionXP works seamlessly with OpenSSH server and client software.
BastionXP offers Zero Trust Network Access(ZTNA) Security. All servers and end-users are required to authenticate with the BastionXP Authentication Server using an SSO and 2FA login, before access to the network can be granted.
BastionXP issues short-lived SSH, TLS/SSL X.509 certificates to end-users so that no user would have an indefinite access to any network resource. Moreover, these certificates, issued to a specific user based on Role Based Access Control(RBAC) can be used to access only a specific server(s) in the network. BastionXP provides you fine-grained control over who can access what resources in a network and for how long.
All network access events are logged and available for download, so that the logs can be analyzed using a log analyzer for anamoly detection.
BastionXP solution is available in three different formats:
| Software | Features | Best Suited For |
|---|---|---|
| Free Software Version | Limited features & best-effort support | Hobbyists, educational purposes and non-commercial use cases. |
| Cloud-Hosted Version | All enterprise features & priority customer support | Small teams and Startups. |
| Self-Hosted Version | All enterprise features & priority customer support | Enterprises and Large Organizations. |
KeyStore Explorer BastionXPNo features have been listed yet.
Based on our record, KeyStore Explorer seems to be more popular. It has been mentiond 12 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
> I still have nightmares about trying to set up SSL with nginx and my own self-managed certificates. For anyone who needs to run their own CA (which I'm now doing for my homelab), I've found that using GUI software like KeyStore explorer is a sufficiently easy and lazy way of doing that, which actually works well, both for securing regular sites, as well as doing mTLS: https://keystore-explorer.org/ > Shoutout to... - Source: Hacker News / 16 days ago
Yes, that's clear but you need the private key to create a CSR. I'm guessing since you are using a Java app you should either have a JKS (old fashioned) or a P12 (pkcs12) keystore, one of those should contain the private key, you can use keystore explorer to extract the data. Https://keystore-explorer.org/. Source: over 1 year ago
Personally, I've also had decent experiences with Keystore Explorer: https://keystore-explorer.org/ I actually wrote about using it on my blog, which has plenty of screenshots: https://blog.kronis.dev/tutorials/lets-run-our-own-ca. - Source: Hacker News / over 1 year ago
Then let me tell you about keystore explorer https://keystore-explorer.org/ which will make your life a lot easier (and less chance that there are more then 1 keys inside your keystore. Source: over 1 year ago
I... Kind of like it? Not the fact that using such a GUI would be almost impossible, like the humorous example of an "engineer oriented UI" in the Silicon Valley series https://www.reddit.com/r/SiliconValleyHBO/comments/4nvvnl/pied_pipers_easytouse_tools/ which might be confusing for most people. But rather the fact that all of the complexity the software has is laid bare, so that nobody could mistakenly assume... - Source: Hacker News / about 2 years ago
TinyCA - TinyCA is a simple graphical userinterface written in Perl/Gtk to manage a small CA (Certification...
Smallstep Certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
OpenXPKI - OpenXPKI is a software stack that provides all necessary components to manage keys and certificates...
Teleport Database Access - Instant, secure, & privileged access to Postgres and MySQL
EJBCA - EJBCA® is a PKI Certificate Authority software, built using Java (JEE) technology.
Marlin - Marlin is a new GTK3-based file manager for Linux, pretty slick and fast.