Introducing CFSSL - CloudFlare's PKI toolkit
Jul 10, 2014Nick Sullivan
Summary
This post introduces CFSSL, Cloudflare's open-source Public Key Infrastructure (PKI) toolkit. CFSSL is used internally for TLS/SSL certificate bundling and Certificate Authority (CA) infrastructure, and is now open-sourced to help website operators create correct certificate bundles more easily. It addresses the pain points of certificate bundling, balancing performance, security, and compatibility by helping users select the optimal certificate chain for maximum browser compatibility. The post details how CFSSL works, its use as a web service with a JSON API, and its role in Cloudflare's own HTTPS service.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack