Introducing CFSSL - CloudFlare's PKI toolkit

What this post added

This post introduces CFSSL, Cloudflare's open-source Public Key Infrastructure (PKI) toolkit. CFSSL is used internally for TLS/SSL certificate bundling and Certificate Authority (CA) infrastructure, and is now open-sourced to help website operators create correct certificate bundles more easily. It addresses the pain points of certificate bundling, balancing performance, security, and compatibility by helping users select the optimal certificate chain for maximum browser compatibility. The post details how CFSSL works, its use as a web service with a JSON API, and its role in Cloudflare's own HTTPS service.