Skip to content

coinbase/baseca

Repository files navigation

Go Report Card PR Build Release Build

Overview

baseca is a gRPC service that serves as a Public Key Infrastructure (PKI) control plane that issues short-lived x.509 certificates at runtime using attestation.

Use Cases

baseca integrates with AWS Private CA and becomes as a management layer and a Certificate Authority; instead of issuing leaf certificates directly from Private CA, baseca issues and manages Subordinate Certificate Authorities from upstream used to sign requests depending on the scope of a service account.

  • Client Authentication
  • Server Authentication
  • Code Signing

Running baseca

Benefits

  • Short-Lived Certificates with Ephemeral Private Key Material
  • No Limits on Number of Issued Certificates
  • Protects Issuance of Certificates on Scope
  • Supports Node Attestation
  • Supports Issuance from On-Prem and Multi-Cloud

About

No description, website, or topics provided.

Resources

License

Security policy

Stars

Watchers

Forks

Packages

 
 
 

Languages