Self-hosted projects built with X.509

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Apache-2.0Actively maintained

Alternative to:

HashiCorp Vault+7

Open-source centralized ACME client to manage TLS certificates with automated renewals, API-key retrieval for clients, http-01/dns-01 challenge support, Go backend and React UI.

Actively maintained

Alternative to:

Caddy Cloud+5

The sftp-server subsystem in OpenSSH provides SFTP file-transfer services over SSH with support for internal-sftp, chroot jails, public-key and certificate authentication, and protocol extensions.

Activity unknown

Alternative to:

Files.com+12