zepb/simpleca repository overview

⁠SimpleCA

An extremely simple CA web application for educational purposes. The web application allows you to upload and view a CSR and download a certificate generated from it. A chain of Root CA - Intermediate CA - Certificate is used. The generated certificate allows SAN and sets the IssuerName, BasicConstrains, KeyUsage and AuthorityKeyIdentifier fields to be accepted by modern browsers.

GitHub Repository⁠

⁠Image usage

docker run -p 80:80 --name simpleca zepb/simpleca

To persist the ca keys mount the ca folder (where the certificates and keys are in) to the host

docker run -p 80:80 --name simpleca -v /host/path/ca:/ca zepb/simpleca

⁠Application usage

There are 4 options available on the website.

• CSR Upload - Upload and view the CSR file
• Certificate Download - Download the created certificate
• Download Root CA Certificate
• Download Intermediate CA Certificate

When a CSR is uploaded, a new process is started and a cookie with the process number is stored. A certificate can be created within the process, which can then be downloaded. As long as no new process is started, the created certificate can be downloaded as often as required. If no process has been started yet, the message "No Process" is displayed under Certificate Download.