Kipuka EST (RFC 7030) enrollment server with Multi-CA HA, HSM support, and NIAP CA PP compliance. Built on Synta ASN.1/X.509.

Event-driven certificate revocation lab with triple PKI hierarchies (RSA-4096, ECC P-384, ML-DSA-87). Automated Zero Trust response using Dogtag PKI, FreeIPA, Kafka, and Event-Driven Ansible.

Documentation website for Kipuka, deployed with Cloudflare Workers Builds

Developer documentation site for hoike — a Rust OCSP responder

Rust OCSP responder for pre-signed ahu bundles — keyless edge serving, multi-CA, air-gap-capable

MCP server for managing and monitoring a Ubiquiti UDM Pro via Claude Code

Akamu is a self-hosted certificate authority that speaks the ACME protocol defined in RFC 8555.

Synta is a high-performance Rust library for ASN.1 (Abstract Syntax Notation One) parsing, decoding, and encoding.

A D-Bus service which runs odd jobs on behalf of client applications

The slapi-nis package contains NIS Server plugin and Schema Compatibility plugin for use with Red Hat Directory Server and 389 Directory Server.

Beyond coding. We forge.

Rust libraries for modeling and evaluating access control systems, with a focus on FreeIPA-specific implementations.

Rust bindings to OpenSSL using idiomatic Rust.

kurbu5 is a Rust workspace that makes it possible to write MIT Kerberos KDC plugins in safe, idiomatic Rust.

A sample rpm to demonstrate how to package CA certificate chain

A repository to track currently implemented and planned for implementation ASN.1 modules for Synta

Dogtag PKI CA + ACME Responder deployment automation for RHEL 8 (redhat-pki v11.9)