macOS
brew install certstraplocal Homebrew formula metadata
sudo port install certstrapMacPorts ports tree · security/certstrap/Portfile · 来源: api.github.com
安装
brew install certstraplocal Homebrew formula metadata
sudo port install certstrapMacPorts ports tree · security/certstrap/Portfile · 来源: api.github.com
sudo apk add certstrapAlpine Linux edge package indexes · certstrap · 来源: dl-cdn.alpinelinux.org
nix profile install nixpkgs#certstrapnixpkgs package indexes · pkgs/by-name/ce/certstrap/package.nix · 来源: api.github.com
scoop install main/certstrapScoop official bucket manifest trees · bucket/certstrap.json · 来源: api.github.com
概览
Tools to bootstrap CAs, certificate requests, and signed certificates
历史
certstrap is Square's Go-based CLI for bootstrapping certificate authorities, certificate requests, and signed certificates. Its README describes it as a simple certificate manager adapted from etcd-ca and intended as a friendlier alternative to hand-writing OpenSSL commands and config files.
The public repository was created in 2015 and the release history includes v1.0.0/v1.0.1 in 2016, later 1.1 and 1.2 releases, and v1.3.0 in 2022. The project documents building from source with Go and contributing through the upstream repository.
certstrap became a packaged PKI helper across multiple ecosystems. The supplied package facts list APK, Homebrew, MacPorts, Nix, and Scoop packages, matching its role as a small standalone executable for development and internal PKI workflows.
Typical certstrap usage starts by initializing a CA, then generating identity keys and CSRs, and finally signing certificate requests. By default, generated keys, CSRs, certificates, and CRLs are placed in the depot directory, documented as out/.
certstrap matters in package catalogs because it turns the brittle OpenSSL local-CA bootstrap routine into a reproducible CLI. It is especially visible to developers who need throwaway or internal TLS material without adopting a larger PKI system.
安全态势
narrow executable package without higher-risk signals.
绿色 风险 · 低 置信度 · appliance
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
certstrap | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:certstrap |
|---|---|
| 版本 | 1.3.0 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/square/certstrap |
| 仓库 | https://github.com/square/certstrap |
| 最后更新 | 2026-07-27T19:20:58+02:00 |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。
certstrap
nix profile install nixpkgs#certstrapcertstrap 1.3.0-r35
Tools to bootstrap CAs, certificate requests, and signed certificates
https://github.com/square/certstrap
sudo apk add certstrapcertstrap
sudo port install certstrapmain/certstrap
scoop install main/certstrap来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.