CFSSL

About

CFSSL is Cloudflare's PKI/TLS swiss army knife. It is both a command line tool and an HTTP API server for signing, verifying, and bundling TLS certificates. CFSSL consists of a set of packages useful for building custom TLS PKI tools and multiple command-line utilities: - cfssl - The main command line utility for certificate operations - multirootca - A certificate authority server supporting multiple signing keys - mkbundle - Build certificate pool bundles - cfssljson - Takes JSON output from cfssl and writes certificates to disk - cfssl-bundle - Build certificate bundles - cfssl-certinfo - Extract certificate information - cfssl-newkey - Generate private keys and certificate requests - cfssl-scan - Scan hosts for security issues Key Features: - Sign, verify, and bundle TLS certificates - Generate certificate signing requests and private keys - Support for RSA and ECDSA keys - Certificate bundling with validation - OCSP signing and serving - Multi-root certificate authority support - RESTful API server for certificate operations - Certificate information extraction - Host security scanning Usage Instructions: To use cfssl commands easily from your terminal, add the flatpak exports directory to your PATH: echo 'export PATH="$HOME/.local/share/flatpak/exports/bin:$PATH"' >> ~/.bashrc source ~/.bashrc Then access commands directly: - com.cloudflare.cfssl version - Main cfssl command - flatpak run --command=cfssljson com.cloudflare.cfssl --help - JSON processor - flatpak run --command=cfssl-certinfo com.cloudflare.cfssl --help - Certificate info All 8 binaries (cfssl, cfssljson, mkbundle, multirootca, cfssl-bundle, cfssl-certinfo, cfssl-newkey, cfssl-scan) are available using flatpak run --command=<name> com.cloudflare.cfssl.