247 best open source tls projects.

We have collection of more than 1 Million open source products ranging from Enterprise product to small libraries in all platforms. We aggregate information from all open source repositories. Search and find the best for your needs. Check out projects section.

Displaying 1 to 20 from 247 results

acme - :lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

acmetool is an easy-to-use command line tool for automatically acquiring certificates from ACME servers (such as Let's Encrypt). Designed to flexibly integrate into your webserver setup to enable automatic verification. Unlike the official Let's Encrypt client, this doesn't modify your web server configuration.You can perform verifications using port 80 or 443 (if you don't yet have a server running on one of them); via webroot; by configuring your webserver to proxy requests for /.well-known/acme-challenge/ to a special port (402) which acmetool can listen on; or by configuring your webserver not to listen on port 80, and instead running acmetool's built in HTTPS redirector (and challenge responder) on port 80. This is useful if all you want to do with port 80 is redirect people to port 443.

acmetool certificate acme-server acme letsencrypt ssl tls x509 security

jetty

Java

The Eclipse Jetty Project

jetty websockets servlet http-server http2 http2-push http-client http https ssl tls fcgi unix-socket embedded eclipse osgi

boulder - An ACME-based CA, written in Go.

This is an implementation of an ACME-based CA. The ACME protocol allows the CA to automatically verify that an applicant for a certificate actually controls an identifier, and allows domain holders to issue and revoke certificates for their domains.Boulder has a Dockerfile to make it easy to install and set up all its dependencies. This is how the maintainers work on Boulder, and is our main recommended way to run it.

boulder acme certificate-authority tls lets-encrypt ca pki certificate security

warp - Secure and simple terminal sharing

warp lets you securely share your terminal with one simple command: warp open. When connected to your warp, clients can see your terminal exactly as if they were sitting next to you. You can also grant them write access, the equivalent of handing them your keyboard. warp distinguishes itself from "tmux/screen over ssh" by its focus and ease of use as it does not require an SSH access to your machine or a shared server for others to collaborate with you.

terminal shell tls sharing command-line

forge - A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

Javascript

A native implementation of TLS (and various other cryptographic tools) in JavaScript. The Forge software is a fully native implementation of the TLS protocol in JavaScript, a set of cryptography utilities, and a set of tools for developing Web Apps that utilize many network resources.

crypto cryptography x509 message-digest aes asn1 cipher pkcs tls certificate pkcs7 pkcs1 pkcs12 pbkdf2 csr hmac sha1 sha256 md5 asn asn.1 cbc des gcm http https network pki prng rc2 rsa sha384 sha512 ssh x.509

bettercap - A complete, modular, portable and easily extensible MITM framework.

Ruby

bettercap is a complete, modular, portable and easily extensible MITM tool and framework with every kind of diagnostic and offensive feature you could need in order to perform a man in the middle attack. All dependencies will be automatically installed through the RubyGems system but in some cases you might need to install some system dependency in order to make everything work.

bettercap mitm man-in-the-middle spoofing security security-audit tls proxy ettercap sslstrip

OpenSSL - Toolkit for SSL and TLS

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library.

ssl tls cryptography security

sslyze - Fast and powerful SSL/TLS server scanning library.

Python

Fast and powerful SSL/TLS server scanning library for Python 2.7 and 3.4+. SSLyze is a Python library and a CLI tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL/TLS servers.

ssl scans ssllabs library tls security tls13

KeyBox - Web-based SSH console that centrally manages administrative access to systems

Java

KeyBox is an open-source web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding.

ssh ssh-console system-admin key-management ssl tls security

auto-sni - 🔐 Free, automated HTTPS for NodeJS made easy.

Javascript

If you have any questions, throw them up on gitter. AutoSNI requires access to low level ports 80 (http) and 443 (https) to operate by default. These ports are typically restricted by the operating system.

auto auto-sni http https lets-encrypt letsencrypt letsencrypt-auto renew secure sni ssl tls web

openssl - TLS/SSL and crypto library

TLS/SSL and crypto library

cryptography openssl encryption tls ssl decryption

beast - HTTP and WebSocket built on Boost.Asio in C++11

Beast is a C++ header-only library serving as a foundation for writing interoperable networking libraries by providing low-level HTTP/1, WebSocket, and networking protocol vocabulary types and algorithms using the consistent asynchronous model of Boost.Asio. Symmetry: Algorithms are role-agnostic; build clients, servers, or both.

boost c-plus-plus-11 websocket websocket-client websocket-server http http-client http-server asio networking async-programming cplusplus server osx tls ssl websockets boost-libraries

go-http-tunnel - Fast and secure tunnels over HTTP/2

Go HTTP tunnel is a reverse tunnel based on HTTP/2. It enables you to share your localhost when you don't have a public IP. Build the latest version.

http http2 tcp tls tls-tunnel tunnel proxy local-machine url basic-authentication

gobetween - :cloud: Modern & minimalistic load balancer for the Сloud era

gobetween - modern & minimalistic load balancer and reverse-proxy for the ☁️ Cloud era. Current status: Under active development. Currently in use in several highy loaded production environments.

balancer proxy-server load-balancer discovery microservices docker consul srv cloud tcp tls udp tcp-proxy udp-proxy tls-proxy sni proxy backend lxd letsencrypt

gost - GO Simple Tunnel - a simple tunnel written in golang

GO Simple Tunnel - a simple tunnel written in golang

proxy tunnel shadowsocks quic kcp ssh http2 obfs4 socks socks5 socks4 socks4a udp tls shadowsocks-udp-relay socks5-tls sni

certmagic - Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

CertMagic is the most mature, robust, and capable ACME client integration for Go. With CertMagic, you can add one line to your Go application to serve securely over TLS, without ever having to touch certificates.

https acme letsencrypt automatic-https tls tls-certificate

illustrated-tls - The Illustrated TLS Connection: Every byte explained

The Illustrated TLS Connection: Every byte explained

tls tls12 elliptic-curves rsa ecdhe ssl aes-cbc

Ponzu - Headless CMS with automatic JSON API

Ponzu is a powerful and efficient open-source HTTP server framework and CMS. It provides automatic, free, and secure HTTP/2 over TLS, a useful CMS and scaffolding to generate content editors, and a fast HTTP API on which to build modern applications.

cms tls http2 cli json api server productivity headless-cms content-management-system

testssl.sh - Testing TLS/SSL encryption anywhere on any port

Shell

testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Or help yourself downloading the ZIP archive https://github.com/drwetter/testssl.sh/archive/2.9dev.zip. testssl.sh --help will give you some help upfront. More help: see doc directory with man pages. Older sample runs are at https://testssl.sh/.

tls cipher openssl logjam socket hpkp ct hsts bigip caa freak drown heartbleed rc4 ocsp ticketbleed crime poodle ssl

subnet - Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN.

Simple VPN server/client for the rest of us. subnet establishes a TLS connection to the server. A TUN interface is created, and setup with the given network parameters (local IP, subnet). All traffic that matches the localIP + subnet gets routed to the VPN server.

vpn vpn-server vpn-client tunnel tun tls