Ask HN: Are there any open source PKI solutions that don't suck?

[Bauernfeind]

We are a small IoT Startup and looking for a PKI solution to provision certificates for our devices. I had a look at openxpki, smallstep and PrimeKey, but either they are a pain to run or really expensive.

Do you know any other solutions? :)

[verdverm]

CFSSL, cloudflare's OSS CLI for PKI

[ricktdotorg]

i second cfssl. it's pretty fantastic for internal PKI.

[Nextgrid]

XCA if you need something simple running on a single machine.

[rektide]

dogtags (perhaps via freeipa) or cfssl could be options, potentially.

[botanicalfriend]

Vault X.509

[yuppie_scum]

LetsEncrypt