A production-ready solution for managing Mutual TLS (mTLS) certificates with enterprise-grade security and scalability.
- 🔒 Certificate Authority: Self-signed root CA or PFX import
- 📱 Modern Web UI: Vue.js 3 frontend for easy certificate management
- 🛡️ Security First: File locking, input validation, audit logging
- 🚫 Revocation: CRL distribution and OCSP responder
- 🔐 Authentication: Password + OIDC support
- 📦 Container Ready: Optimized Docker deployment
git clone https://git.yawal.io/mdsahelpv/vaultls.git
cd VaulTLS
cp .env.example .env
# Edit .env file with your secrets
docker compose up --build -dAccess at http://localhost:4000
# Prerequisites: Rust, Node.js v18+, SQLite3
./start-vaultls.sh start- Setup: Choose CA mode and create/import your root CA
- Create Certificates: Generate client/server certificates or sign CSRs
- Manage: Revoke certificates, view audit logs, configure settings
- Environment:
.envfile for basic settings - Application:
settings.jsonfor advanced configuration - Documentation: See
SETTINGS.mdfor details
| Service | URL Pattern | Notes |
|---|---|---|
| CRL | /api/certificates/crl/<ca_id> |
CA-specific revocation lists |
| OCSP | /api/ocsp |
Global responder for all CAs |
| AIA | /api/certificates/ca/download |
Generic CA download |
MIT License - see LICENSE file