krestfield/certdog repository overview

⁠Krestfield Certdog

• A certificate authority, management and automation system offering a UI and a full REST API to build CAs and automate the issuance of certificates
• Supports PrimeKey EJBCA, Microsoft Active Directory Certificate Services as well as any number of internal CAs
• Internal CAs can utilise PKCS#11, Azure Key Vault, Google KMS, Yubi HSM 2 or Software key stores and any CA hierarchy can be created
• Support for CRL and OCSP services
• Microsoft CA keys and certificates can be imported into Certdog
• This demo version has all functionality but a 1000 certificate limit. It does not include the Microsoft ADCS connector
• You can install the windows version locally (including the Microsoft ADCS Connector) by following the guide here⁠

⁠To Get Started

1. Get:

docker pull krestfield/certdog  

1. Start the container

docker run -d -p 443:443 -p 80:80 --name certdog krestfield/certdog  

1. Navigate to https://127.0.0.1⁠ and login with:

1. To remove TLS browser warnings, replace the TLS certificate by following the documentation here⁠. On test environments you have the option of installing the test root temporarily into your local trust store. The test root certificate can be found here⁠
2. Optionally, to create an initial set of CAs, issuers and certificate profiles, run the create-test-cas.sh command. You'll be prompted to enter the credentials to use, which will usually be the admin username and the new password you entered after first login in step 2 above. E.g.

Open a shell on the container:

docker exec -it certdog bash

Run the script:

root@18c846853fad:/usr/local/certdog/install# ./create-test-cas.sh
Enter the credentials of the certdog user that has admin rights

Username [admin]:

Password:

This will create the following:

• Certdog Test Root CA
• Certdog Test Root CA
• Certdog TLS Profile
• Certdog TLS Issuer

⁠Issuer your first certificate

1. Click Request | DN Request from the menu, enter a Subject DN (e.g. CN=test cert) and a P12 Password and click Request Certificate. Download your certificate as a PKCS#12, JKS or PEM file

Release note⁠
More documentation is here⁠
Product URL: https://krestfield.com/certdog⁠
Questions to: [email protected]⁠